critical9.8
CVE-2026-26002
Open OnDemand is an open-source high-performance computing portal.
Impact
Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when navigating to a directory. This has been patched in versions 4.0.9 and 4.1.3. Versions below this remain susceptible.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osc | Open Ondemand | before 3.1.16 from 4.0.0 before 4.0.9 from 4.1.0 before 4.1.3 |