Skip to content
Threat Feed
Subscribe

Product

DIRAC

1 brief RSS
critical advisory

DIRAC Vulnerable to Remote Code Execution via SQL Injection and Eval in DatasetManager

An authenticated user can achieve remote code execution in DIRAC's FileCatalog DatasetManager due to an SQL injection vulnerability (CVE-2026-61667) that allows manipulation of query results passed to an `eval` function, leading to full system compromise.

DIRAC remote-code-execution sql-injection python web-application vulnerability cve-2026-61667
6t