Skip to content
Threat Feed

Tag

Yamcs

1 brief RSS
critical threat

Yamcs Server-Side Code Injection via Janino Expression Engine

A server-side code injection vulnerability exists in Yamcs algorithm evaluation engine, allowing an authenticated user with `ChangeMissionDatabase` privilege to achieve Remote Code Execution (RCE) by injecting a malicious Java payload via the Janino compiler.

yamcs-core rce code-injection yamcs
2r 2t 1i