Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-5208

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in coolercontrold

Description

Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CoolerControl coolercontrold

Default version status: unaffected

  • 3.1.0 to < 4.0.0affected

References