Vulnerabilities

TI-2026-54090 CVE-2026-77602 · GHSA-jjq7-m736-w977

Code injection in OpenC3 cosmos

HIGH 76

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00716 Published 2026-09-23 Fixed in 7.3.0 CWE-94

TI-2026-53989 CVE-2026-77394 · GHSA-gvf2-2rh5-mpgf

OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

HIGH 66

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00417 Published 2026-09-23 Fixed in 7.3.0 CWE-79

TI-2026-54089 CVE-2026-77601 · GHSA-vp3w-52v9-q57f

OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting

HIGH 73

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00628 Published 2026-09-23 Fixed in 7.3.0 CWE-78

TI-2026-30456 CVE-2026-42088

OpenC3 COSMOS: Administrative Actions via the Script Runner Tool

HIGH 76

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00341 Published 2026-05-04 Fixed in 7.0.0-rc3 CWE-250

TI-2026-30455 CVE-2026-42087 · GHSA-v529-vhwc-wfc5

OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base

HIGH 76

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00323 Published 2026-05-04 Fixed in 7.0.0-rc3 CWE-89

TI-2026-30454 CVE-2026-42086 · GHSA-ffq5-qpvf-xq7x

OpenC3 COSMOS: Self-XSS in the Command Sender

MEDIUM 54

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.002 Published 2026-05-04 Fixed in 7.0.0 CWE-79

TI-2026-30453 CVE-2026-42085 · GHSA-4jvx-93h3-f45h

OpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenames

LOW 20

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00313 Published 2026-05-04 Fixed in 6.10.5, 7.0.0-rc3 CWE-23

TI-2026-30452 CVE-2026-42084 · GHSA-wgx6-g857-jjf7

OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence

HIGH 70

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00305 Published 2026-05-04 Fixed in 6.10.5, 7.0.0-rc3 CWE-620

TI-2025-41847 CVE-2025-68271 · GHSA-w757-4qv9-mghp

Unauthenticated Remote Code Execution in openc3-api

MEDIUM 50

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00636 Published 2026-01-13 Fixed in 6.10.2 CWE-95

TI-2025-20781 CVE-2025-28389 · GHSA-g4xp-7879-36gf

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

HIGH 82

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00596 Published 2025-06-13 No fix listed CWE-521

TI-2025-20780 CVE-2025-28388 · GHSA-9c5p-pqv5-93v2

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

HIGH 82

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2025-06-13 No fix listed CWE-798

TI-2025-20779 CVE-2025-28386 · GHSA-x863-q7hx-5hmw

A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3…

HIGH 82

A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary code via uploading a crafted .txt file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01059 Published 2025-06-13 No fix listed CWE-94

TI-2025-20778 CVE-2025-28384 · GHSA-p67j-387g-75wc

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows…

HIGH 78

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00886 Published 2025-06-13 No fix listed CWE-22

TI-2025-20777 CVE-2025-28382 · GHSA-cf8v-5mrc-jv7f

An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers…

HIGH 72

An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00886 Published 2025-06-13 No fix listed CWE-22

TI-2025-20776 CVE-2025-28381 · GHSA-4x4x-pv89-58q8

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service…

HIGH 72

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-06-13 No fix listed CWE-526

TI-2025-20775 CVE-2025-28380 · GHSA-pmmr-4c35-wgj4

A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00338 Published 2025-06-13 No fix listed CWE-79

TI-2024-31818 CVE-2024-47529 · GHSA-4xqv-47rm-37mm

OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)

LOW 22

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00353 Published 2024-10-02 Fixed in 5.19.0 CWE-312

TI-2024-31366 CVE-2024-46977 · GHSA-8jxr-mccc-mwg8

OpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`)

LOW 26

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00912 Published 2024-10-02 Fixed in 5.19.0 CWE-22

TI-2024-29389 CVE-2024-43795 · GHSA-vfj8-5pj7-2f9g

OpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`)

LOW 24

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00483 Published 2024-10-02 Fixed in 5.19.0 CWE-79

Vulnerabilities

Filters