CVE-2026-123717

Vendor

Eclipse CSI

Product

otterdog

CVSS v4.0

8.8 AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-78

Exposure class

Endpoint security, Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 37
   CVE NVD 2h ago

   OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through 1.7.1 allows a user able to modify…

   OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through 1.7.1 allows a user able to modify an organization configuration to execute arbitrary commands with the privileges…

   CVSS 8.8 CVE-2026-123717 Eclipse CSI