Vulnerabilities

TI-2026-21016 CVE-2026-26002

OnDemand susceptible to malicious input when navigating to a directory.

LOW 31

Open OnDemand is an open-source high-performance computing portal.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00607 Published 2026-03-04 Fixed in 4.0.9, 4.1.3 CWE-74

TI-2025-40555 CVE-2025-66029

LOW 33

Open OnDemand provides remote web access to supercomputers.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.002 Published 2025-12-17 No fix listed CWE-522

TI-2020-18567 CVE-2020-36247 · GHSA-qvvw-rm7q-75fx

LOW 38

Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00449 Published 2021-02-19 No fix listed CWE-352