Description
OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated denial-of-service vulnerability exists in OliveTin’s OAuth2 login flow. Concurrent requests to /oauth/login can trigger unsynchronized access to a shared registeredStates map, causing a Go runtime panic (fatal error: concurrent map writes) and process termination. This allows remote attackers to crash the service when OAuth2 is enabled. This issue has been patched in version 3000.10.3.
INFO
Published Date :
2026-03-05T19:33:46.924Z
Last Modified :
2026-03-06T18:01:38.094Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2026-28789 vulnerability.
| Vendors | Products |
|---|---|
| Olivetin |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-28789.
