{"id":"CVE-2026-12398","title":"Galaxy NG: command injection vulnerability","summary":"Galaxy NG: command injection vulnerability","severity":"high","cvss":7.5,"cwe":["CWE-78"],"vendor":"galaxy-ng","product":"galaxy-ng","ecosystem":"pip","affected":["galaxy-ng <= 4.9.2"],"published":"2026-06-16","updated":"2026-06-19","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-6hw7-j4jw-wpff","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12398"},{"url":"https://access.redhat.com/security/cve/CVE-2026-12398"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2489180"},{"url":"https://github.com/advisories/GHSA-6hw7-j4jw-wpff"}],"tags":["ghsa","pip"],"epss":0.00889,"epssPercentile":0.5784,"ingestedAt":"2026-06-29T14:31:47.737Z","slug":"CVE-2026-12398","body":"## Overview\n\nA command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the legacy role import API (v1) interpolates unsanitized git ref names (branch/tag names) into shell commands executed via subprocess.run() with shell=True. An authenticated user who controls a git repository can create a branch or tag with shell metacharacters in the name to achieve remote code execution on the pulp worker. The vulnerable endpoint is only reachable when GALAXY_ENABLE_LEGACY_ROLES is set to True, which is not the default configuration.\n\n## Affected packages\n\n- `galaxy-ng <= 4.9.2`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}