CyberRota Analysis
AI-GeneratedOpenChamber 1.11.7 in Docker is vulnerable to unauthenticated remote code execution, allowing attackers to send crafted POST requests to the /api/fs/exec endpoint and execute arbitrary shell commands without any input validation. This critical vulnerability can lead to complete system compromise, as attackers can run commands as the application user and access sensitive output. Organizations using this version of OpenChamber should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn() without any allowlist, blocklist, or argument validation. The authentication middleware becomes a no-op when UI_PASSWORD is not configured, matching the default Docker deployment, enabling attackers to execute arbitrary OS commands as the application user and retrieve full command output including stdout, stderr, and exit code from the server response.