medium4.6
CVE-2026-78971
In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo proc…
Impact
In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions.
Affected products
| Product | Affected versions |
|---|---|
| Halo | through 2.25.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.