Vulnerabilities

TI-2026-44155 CVE-2026-61668 · GHSA-vg99-gr89-qhw9

DIRAC: Pilot code downloaded over unverified HTTPS connection

LOW 37

DIRAC is an interware, meaning a software framework for distributed computing.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00396 Published 2026-09-15 Fixed in 8.0.79, 9.0.22 +1 CWE-295

TI-2026-44154 CVE-2026-61667 · GHSA-m4m7-4cw8-62j6

MEDIUM 45

DIRAC is an interware, meaning a software framework for distributed computing.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01213 Published 2026-09-15 Fixed in 8.0.79, 9.0.22 +1 CWE-89

TI-2026-33328 CVE-2026-45579 · GHSA-9jpv-c7p4-997x

MEDIUM 44

DIRAC is an interware, meaning a software framework for distributed computing.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00864 Published 2026-09-15 Fixed in 8.0.79, 9.0.22 +1 CWE-95

TI-2025-33911 CVE-2025-54066 · GHSA-hfj7-542q-8fvv

MEDIUM 55

DiracX-Web is a web application that provides an interface to interact with the DiracX services.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00413 Published 2025-07-17 Fixed in 0.1.0-a8 CWE-601

TI-2024-19672 CVE-2024-29905 · GHSA-v6f3-gh5h-mqwx

LOW 35

DIRAC is an interware, meaning a software framework for distributed computing.

CVSS 3.1HIGH 8.1 Local Low privileges User interaction EPSS 0.00319 Published 2024-04-09 Fixed in 8.0.41 CWE-668

TI-2024-16342 CVE-2024-24825 · GHSA-59qj-jcjv-662j

MEDIUM 40

DIRAC is a distributed resource framework.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00534 Published 2024-02-08 Fixed in 8.0.37 CWE-200