CVE-2026-105407: OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
Published Oct 12, 2026
·Updated
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server.
Affected Software
1 affected component
Tuleap Tuleap Enterprise Edition>=17.0<=17.5
Event History
Oct 12, 2026
CVE Published
via MITRE·10:44 AM
Data Sourced
via MITRE·10:44 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker needs low-privileged access to the affected Tuleap Enterprise Edition instance. The attack can be performed over the network and does not require user interaction.
2
Which deployments are affected?
Tuleap Enterprise Edition versions 17.0 through 17.5 are affected. The provided information does not state whether any particular feature, configuration, or default deployment condition is required.
3
What is the potential impact of successful exploitation?
A successful attacker could execute arbitrary commands on the server. The assigned vector indicates high impact to confidentiality, integrity, and availability.