Skip to content
Threat Feed

Product

Yamcs-Core (< 5.12.7)

1 brief RSS
critical threat

Yamcs Authenticated Remote Code Execution via Jython Algorithm Code Injection

Yamcs is vulnerable to authenticated remote code execution (CVE-2026-46621) where an authenticated user with the ChangeMissionDatabase privilege can inject malicious Jython code into existing Python algorithms, leading to arbitrary command execution on the underlying host operating system.

yamcs-core rce code-injection yamcs
2r 1t 1i