TI-2026-73914 CVE-2026-82026 · GHSA-fp33-g9vp-3ffr
Missing authorization in Radar lets attackers run a shell
Priority MEDIUM 41
Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated attackers to spawn a privileged shell by…