HIGHCVSS 8.1EPSS 0.6%

CVE-2026-27975

Ajenti has potential Remote Code Execution

Published: 2026-10-27
Modified: 2026-10-27
EPSS percentile: 48%
Aliases: GHSA-vcw3-r3fx-j444
Sources: github-advisory

Summary

### Impact An unauthenticated user could gain access to a server to execute arbitrary code on this server. ### Patches This is fixed in the version 2.2.13. Users should upgrade to this version as soon as possible.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
PyPI	aj	—	2.2.13

Remediation: Upgrade to 2.2.13 or later.

References

https://github.com/advisories/GHSA-vcw3-r3fx-j444

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.