CVE-2025-27364: Improper Neutralization of Special Elements used in an OS Command

In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution RCE vulnerability was found in the dynamic agent implant compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web...

PT-2025-7780

Name of the Vulnerable Software and Affected Versions MITRE Caldera versions 4.2.0 through 5.0.0 before 35bc06e Description A Remote Code Execution RCE vulnerability was found in the dynamic agent implant compilation functionality of the server. This allows remote attackers to execute arbitrary...