OPNsense os-acme-client plugin command injection allows root code execution
Logged-in users of a firewall certificate plugin can take full control!
Summary
A command injection flaw was found in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin. An authenticated user with rights to issue or renew certificates can run arbitrary code as root.
Affected when
- os-acme-client plugin 4.17 or earlier
- Google Cloud DNS validation in use
- Authenticated user with certificate issue or renewal rights
What to do
Check that the plugin is newer than 4.17, and read the vendor's advisory. No fixed version is named in the sources.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen