CVE-2026-110005

Name of the Vulnerable Software and Affected Versions Komodo version 2.2.0

Description The periphery agent's container-management functionality allows an authenticated low-privileged user with Execute or Read and Logs permissions to perform OS command injection. By supplying shell metacharacters in a container name processed by the DestroyContainer or SearchContainerLog operations, the input is interpolated without escaping into a command executed via sh -c. This allows arbitrary commands to be executed as root on the managed host, enabling users without Terminal permissions to obtain unrestricted host-level command execution.

Recommendations Update Komodo version 2.2.0 to the patched version.