CVEvulnerability

CVE-2026-44425

5.4 MEDIUM Published 2026-05-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-05-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weaknesses
CWE-1333, CWE-20, CWE-943

Description

ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in the the name field of each filter property in the base64-encoded filter query parameter and the sort_by query parameter, which are then passed directly as BSON/SQL keys in the database layer without validation. Any authenticated user can craft payloads that cause the aggregation / query to fail and the API to return HTTP 500 with no body, with no rate limiting applied. This vulnerability is fixed in 0.24.2.

Affected configurations

• shellhub shellhub (< 0.24.2)

Related

Weakness · CWE (3)

  • CWE-1333 Inefficient Regular Expression Complexity weakness
  • CWE-20 Improper Input Validation weakness
  • CWE-943 Improper Neutralization of Special Elements in Data Query Logic weakness

References