A AegiFlow
MEDIUMCVSS 5.3

CVE-2026-29202

CVE-2026-29202 updated by NVD

Modified
2026-10-27
Sources
nvd

Summary

Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.