PT-2026-67745

CVE-2026-69100

Published

2026-08-04

Updated

2026-08-04

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LAMP Rapid Development Platform versions prior to 5.6.2 commit 84b0c27

Description An issue exists in GlueFactory that allows the execution of unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can manipulate the script field through message template endpoints to execute arbitrary Groovy code and operating system commands on the backend server.

Recommendations Update LAMP Rapid Development Platform to the version containing commit 84b0c27.

Exploitability

Exploit

Fix

Impacts

Researchers

Fiona

Lza

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')