CVE-2025-68922

Summary

OpenOps before 0.6.11 allows remote code execution in the Terraform block.

Affected Software

Weaknesses

• CWE-78: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/openops-cloud/openops/pull/1767
• https://linear.app/openops/issue/OPS-3254
• https://github.com/openops-cloud/openops/releases/tag/0.6.11
• https://github.com/openops-cloud/openops/compare/0.6.10…0.6.11

• ←Previous
• Next→