Applicable to:
- SolusVM 2
Situation
A server-side template injection vulnerability CVE-2026-105474 has been identified in SolusVM 2 that could allow an authenticated user to execute arbitrary code on the server with elevated privileges.
Affected Product Versions
Product / Component | Affected Versions | Patched Version |
|---|---|---|
SolusVM 2 | All versions up to 2.0.0-44576 | 2.0.0-44739 |
Impact
The vulnerability could allow an authenticated user to run unauthorized commands on the server, potentially leading to a full compromise of the management node and affecting other customers hosted on the same node.
Call to Action
- Update SolusVM 2 to version 2.0.0-44739 or later, once released.
Acknowledgement
We would like to thank Georgii Shutiaev for responsibly disclosing this vulnerability.
Comments
Please sign in to leave a comment.