GeoNode - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/geonode/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 21:14:33 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGeoNode: OS command injection via file upload (CVE-2026-33050)https://feed.craftedsignal.io/briefs/2026-11-geonode-rce/Fri, 06 Nov 2026 21:14:33 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-geonode-rce/GeoNode versions prior to 5.1.0 are vulnerable to OS command injection via a malicious layer name in uploaded vector files, allowing authenticated attackers to achieve remote code execution.GeoNode is vulnerable to OS command injection (CVE-2026-33050) when processing vector files. An attacker with low-level privileges can provide a crafted layer name within an uploaded vector file that is not properly neutralized, leading to the execution of arbitrary OS commands on the host server. The vulnerability is confirmed in versions prior to 5.1.0.

Impact

Successful exploitation allows an authenticated attacker with file upload capabilities to execute arbitrary commands on the underlying server, resulting in a full compromise of confidentiality, integrity, and availability.

Recommendation

  • Upgrade GeoNode to version 5.1.0 or later immediately to apply the patch for CVE-2026-33050.
  • Audit logs for unauthorized or unexpected file uploads and shell-execution patterns if GeoNode is exposed.
]]>highadvisory