Critical · published January 28, 2026
🚨 An arbitrary file write vulnerability in OpenProject can turn your project management dashboard into a playground for attackers! 🔥 Think of it like a sneaky delivery person who, instead of just dropping off packages, starts rewriting your office procedures on your whiteboard because nobody checked the delivery instructions. That's how this vulnerability lets attackers overwrite files without breaking a sweat! An attacker with the right permissions can craft a malicious command to overwrite any file the OpenProject process can write to, potentially leading to data loss or even denial of service. Imagine losing your entire project setup due to an unwelcome rewrite! That's the kind of chaos this vulnerability can unleash, impacting your project's integrity and availability.
Think of it like a sneaky delivery person who, instead of just dropping off packages, starts rewriting your office procedures on your whiteboard because nobody checked the delivery instructions. That's how this vulnerability lets attackers overwrite files without breaking a sweat! This vulnerability allows an attacker to inject command-line options into OpenProject's repository diff download endpoint by manipulating the `rev` parameter. When executed, this results in arbitrary files being created or overwritten on the server, depending on the permissions of the OpenProject process.
An attacker with the right permissions can craft a malicious command to overwrite any file the OpenProject process can write to, potentially leading to data loss or even denial of service. Imagine losing your entire project setup due to an unwelcome rewrite! That's the kind of chaos this vulnerability can unleash, impacting your project's integrity and availability. To secure your OpenProject installation, immediately upgrade to versions 17.0.2 or 16.6.6. Review user permissions to ensure that only trusted users have access to the `:browse_repository` permission and consider implementing additional restrictions to limit the impact of malicious inputs. 🛡️ You've got this! Just follow these steps, and you'll be back in control in no time! 💪✨