CVE-2025-68922

Description

OpenOps before 0.6.11 allows remote code execution in the Terraform block.

PUBLISHED Reserved 2025-12-24 | Published 2025-12-24 | Updated 2025-12-26 | Assigner mitre

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

References

github.com/openops-cloud/openops/pull/1767

linear.app/openops/issue/OPS-3254

github.com/openops-cloud/openops/releases/tag/0.6.11

github.com/openops-cloud/openops/compare/0.6.10...0.6.11

cve.org (CVE-2025-68922)

nvd.nist.gov (CVE-2025-68922)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.