Cpe:2.3:a:radar:radar:*:*:*:*:*:*:*:*

Radar versions prior to 1.12.2 contain a missing authorization vulnerability allowing attackers to execute commands via the /api/local-terminal WebSocket endpoint.