GCVE-110-GO-2026-000931

Advisory Published

Vulnetix · Advisory published September 3, 2026

[P-DEVNULL-BACKGROUND] Network/shell command backgrounded with suppressed output — matched: fmt.Sprintf("export PS1='[%s] $PWD $ '; if command -v bash >/dev/null 2>&1; then exec bash; else exec sh; fi", label)}

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected Credentials

Affected Products

Vendor	Product	Versions	Platforms
go	github.com/beclab/olares/cli	v0.0.0-20260706062340-d30eca705df2 (affected), 0.0.0-20260813070305 (affected)	—

References

advisory

web

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON