CVE-2026-34109: Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php
Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\"php jobs/speechaudio.php \".$loginsession.\" \".$GET['id'].\" ...\"). No authentication is required. An unauthenticated remote attacker can append shell metacharacters to execute arbitrary OS commands on the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34109?
The severity of CVE-2026-34109 is critical, rated at 9.3.
How does CVE-2026-34109 vulnerability occur?
CVE-2026-34109 occurs due to the Guardian Language-System passing an unauthenticated id GET parameter directly into a PHP exec() call without sanitization.
What are the potential impacts of CVE-2026-34109?
An attacker exploiting CVE-2026-34109 can execute arbitrary OS commands, potentially affecting confidentiality, integrity, and availability.
How can organizations mitigate CVE-2026-34109?
Organizations can mitigate CVE-2026-34109 by sanitizing input parameters and implementing proper authentication mechanisms before executing commands.
Is authentication required to exploit CVE-2026-34109?
No, CVE-2026-34109 can be exploited by an unauthenticated remote attacker.