CVE-2026-107812

Summary

Nginx UI's self-upgrade feature was vulnerable to supply chain attacks where a malicious binary could be delivered with a matching digest, allowing attackers to execute arbitrary code in the Nginx UI process context. This affects versions 2.0.0 through 2.5.0.

Exploitability

Exploitation requires a network attacker who can compromise the upgrade mirror or manipulate traffic between the client and server, combined with an operator-triggered upgrade action to install the malicious binary.

Blast radius

If exploited, attackers could gain full control of the Nginx UI process, potentially leading to unauthorized access to the web server configuration and execution of arbitrary code on the host system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.5.0 or later to fix the digest validation vulnerability in the self-upgrade mechanism.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.