CVE-2026-42785: OpenKM 6.3.12 Remote Code Execution via Administrative Scripting

Published May 26, 2026

Updated

OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpoint. Attackers can submit malicious script content with an action=Evaluate parameter to execute operating system commands in the context of the OpenKM application server.

Affected Software

1 affected component

OpenKM OpenKM=6.3.12

Event History

May 26, 2026

CVE Published

via MITRE·02:08 PM

Data Sourced

via MITRE·02:08 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-42785?

CVE-2026-42785 has a high severity score of 7.2.

How do I fix CVE-2026-42785?

To fix CVE-2026-42785, upgrade OpenKM to the latest version that addresses this vulnerability.

What type of vulnerability is CVE-2026-42785?

CVE-2026-42785 is a remote code execution vulnerability due to code injection.

Who is affected by CVE-2026-42785?

Authenticated administrators using OpenKM 6.3.12 are affected by CVE-2026-42785.

What can an attacker do with CVE-2026-42785?

An attacker can execute arbitrary Java/BeanShell code and operating system commands via the /admin/Scripting endpoint.