CVE-2026-82041

Summary

This vulnerability allows any authenticated user to execute arbitrary commands on connected agents, posing a significant risk due to the lack of role-based authorization checks.

Exploitability

Exploitation is relatively straightforward as it requires authentication but no specific role is needed, making it accessible to any logged-in user.

Blast radius

The impact is high as it can lead to complete control over monitored endpoints, potentially leading to data exfiltration, system compromise, or denial of service.

Detection

Monitor authentication logs for unusual command execution attempts or unexpected network traffic patterns related to STOMP destinations.

Prioritized remediation

Upgrade to UTMStack 11.2.16 or later immediately.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.