CVE-2026-92531: Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality. A successful exploit could allow the execution of arbitrary commands with the privileges of the account used by the application. To exploit this vulnerability, svn.exe must be installed and capable of being invoked by the service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An authenticated user with administrator privileges can exploit it by storing manipulated repository-field arguments in the database. The injected arguments are processed later by the revision comparison functionality.
What conditions are required for exploitation?
The SVN integration component must be in use, svn.exe must be installed, and the service must be able to invoke it. Exploitation also requires an administrator-level authenticated account.
What level of access could an attacker gain?
Successful exploitation can execute arbitrary operating system commands with the privileges of the account running the application. The impact therefore depends on the permissions assigned to that application service account.