CVE-2026-118477

Summary

The ei_git_repo_url parameter in KaliFast's Git remote configuration endpoint allows authenticated attackers to inject and execute arbitrary OS commands on the server with www-data privileges due to improper input sanitization (CWE-78, OS command injection). This is a critical flaw because it enables full server compromise without requiring admin rights.

Exploitability

Exploitation requires only a valid authenticated session (free registration available), with no additional conditions or complex prerequisites, making it trivial for an attacker to exploit.

Blast radius

Successful exploitation grants www-data-level access, enabling attackers to read sensitive files, modify system configurations, pivot to other services, and potentially exfiltrate data or deploy persistent backdoors on the host.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade KaliFast to version 2026061802 or later, which contains the vendor-provided fix for this OS command injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.