Detections
Analytics
SCA: security update for org.yamcs:yamcs-core (GHSA-vmwp-vh32-rj75)
critical Tenable Cloud Security Plugin ID 442397
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-
supplied JavaScript algorithm text in yamcs-
core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a
ClassFilter, so a user with the ChangeMissionDatabase privilege could override an algorithm through the
MdbOverrideApi.updateAlgorithm endpoint and supply JavaScript that reaches arbitrary Java classes (for
example Java.type("java.lang.Runtime").getRuntime().exec(...)) to execute arbitrary OS commands as the
Yamcs process; in the default configuration with no security.yaml the built-in guest user has
superuser=true, making the issue reachable without authentication. This issue is fixed in versions 5.12.7
and 5.13.0, which disable algorithm editing by default. (CVE-2026-46562)
Solution
Update the org.yamcs:yamcs-core library and its related packages to version 5.12.7 or later.See Also
Plugin Details
Severity: Critical
ID: 442397
Version: Revision 1.4
Type: Local
Family: SCA Checks
Published: 5/28/2026
Updated: 7/20/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 58.14
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-46562
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/27/2026
Vulnerability Publication Date: 5/27/2026
Reference Information
CVE: CVE-2026-46562