High · published January 13, 2026
⚡ An authenticated user with the right permissions can exploit a sneaky input flaw — leading to remote command execution on the LoadMaster appliance. 🔥 Think of it like a bakery where the cashier doesn't check what customers scribble on their order forms; if someone orders ‘fire all the ovens,’ they might just get away with it! An attacker with 'User Administration' privileges could execute arbitrary commands on the LoadMaster appliance, potentially gaining full control. This could lead to unauthorized data access, system manipulation, or even bringing the entire system down — a recipe for chaos!
Think of it like a bakery where the cashier doesn't check what customers scribble on their order forms; if someone orders ‘fire all the ovens,’ they might just get away with it! This vulnerability arises from unsanitized input in API parameters, allowing attackers to inject and execute commands on the server. Essentially, it’s an OS command injection flaw that can be triggered by a user with elevated permissions.
An attacker with 'User Administration' privileges could execute arbitrary commands on the LoadMaster appliance, potentially gaining full control. This could lead to unauthorized data access, system manipulation, or even bringing the entire system down — a recipe for chaos! To fix this, immediately sanitize all API input parameters to reject unexpected commands. Ensure you update to the latest patched version of the LoadMaster appliance once available, and review user permission settings to minimize risks. You've got this! With a few careful steps, you'll reinforce your defenses and keep your systems secure. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| progress/connection_manager_for_objectscale | < 7.2.62.2 | 7.2.62.2 |
| progress/ecs_connection_manager | < 7.2.62.2 | 7.2.62.2 |
| progress/moveit_web_application_firewall | all versions | — |
| progress/multi-tenant_hypervisor | < 7.1.35.15 | 7.1.35.15 |
| progress/loadmaster | < 7.2.54.16 | 7.2.54.16 |
| progress/loadmaster | ≥ 7.2.55.0, < 7.2.62.2 | 7.2.62.2 |