CNNVD-202601-4188 Information
Jan 23, 2026
cve
CNNVD ID
CNNVD-202601-4188
Related CVE
- CNNVD Published: 2026-01-23
Description (Chinese)
Katana Development Starter Kit是Katana Network开源的一个开发入门套件。 Katana Development Starter Kit存在操作系统命令注入漏洞，该漏洞源于executeCommand方法实现缺乏对用户提供字符串的验证，可能导致远程代码执行。
Description (English)
Katana Development Starter Kit is an open-source development package for Katana Network. Katana Development Starter Kit has an operational system command leak, which stems from the executeCommand method that achieves a lack of string validation for users, which may lead to remote code execution.
Hazard Level
Low
Vulnerability Type
操作系统命令注入
Affected Vendor
Katana Network
Published
2026-01-23
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-26-025/
Share on: