CVE-2025-50946

Description

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/OliveTin/OliveTin ↗
• https://github.com/OliveTin/OliveTin/blob/8c073bf45fca6c6eda4e8a9feb182433277343ee/service/internal/executor/arguments.go#L211 ↗
• https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-50946/CVE-2025-50946.md ↗