VU#456950: Komodo Periphery agent contains an OS command injection vulnerability

CERT Coordination Center Version 2 imported change current

Imported from official source

Versions <= 2.2.0 of Periphery, an agent within the Komodo server management platform, is vulnerable to OS command injection due to missing validation of container names, through two vectors: container destruction and container log searches. This allows an authenticated attacker to execute arbitrary commands as root on the underlying host, enabling persistent compromise of infrastructure. …

This version

Version
2 of 2
Recorded
October 27, 2026 15:00
Change
Imported change
Content hash
3159cb8d8e7da54870e174869da8e621
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.