CVE-2026-92531 Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET
An authenticated administrator can execute arbitrary OS commands via the SVN integration if svn.exe is installed.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-92531?
CVE-2026-92531 is a high-severity command injection vulnerability in BugTracker.NET, published on 7 Oct 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality. A successful exploit could allow the execution of arbitrary commands with the privileges of the account used by the application. To exploit this vulnerability, svn.exe must be installed and capable of being invoked by the service.
Weakness: CWE-78
Which versions are affected by CVE-2026-92531?
How do I fix CVE-2026-92531?
No fix has been published for CVE-2026-92531 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-92531 being exploited?
There is no known exploitation of CVE-2026-92531 in the wild and no public exploit code.
Sources
Also known as GHSA-3crv-25xx-hhf4.