Description

Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when navigating to a directory. This has been patched in versions 4.0.9 and 4.1.3. Versions below this remain susceptible.

INFO

Published Date :

2026-03-04T22:05:28.776Z

Last Modified :

2026-03-04T22:05:28.776Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2026-26002 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-26002.

URL Resource
https://github.com/OSC/ondemand/commit/23cb167222886fdd8415277ca5c1215f4c32629c cve-icon cve-icon
https://github.com/OSC/ondemand/commit/37f0ae4efb222e9c0af250feae860a720427df16 cve-icon cve-icon
https://github.com/OSC/ondemand/security/advisories/GHSA-f83q-mhrr-3cr2 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability