GitHub Advisoryadvisory · PyPI

GHSA-vcw3-r3fx-j444 Ajenti has potential Remote Code Execution

HIGH Published 2026-10-27 Modified 2026-10-27 Official page ↗
Aliases
CVE-2026-27975
Ecosystem
PyPI
Packages
aj
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284
Reviewed
2026-10-27

Affected packages

• PyPI aj: < 2.2.13 → fixed in 2.2.13

Description

Impact An unauthenticated user could gain access to a server to execute arbitrary code on this server. Patches This is fixed in the version 2.2.13. Users should upgrade to this version as soon as possible.

Related

Alias · CVE (1)

  • CVE-2026-27975 Ajenti is a Linux and BSD modular server admin panel. vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References