CyberRota Analysis
AI-GeneratedThe vulnerability affects the Looking Glass network-diagnostic platform, where an OS Command Injection flaw allows attackers to execute arbitrary commands due to inadequate input validation. This critical issue, with a CVSS score of 9.8, could lead to severe security breaches, including unauthorized access to network devices. Organizations using versions prior to 1.3.5 should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Looking Glass is a modern, stateless network-diagnostic platform — a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC (ConnectRPC) API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there is an OS Command Injection vulnerability resulting from an unanchored regular expression in the input validation layer. This issue has been patched in version 1.3.5.