{"id":"CVE-2026-24871","summary":"Code injection in Minecraft-Rcon-Manage","details":"Improper Control of Generation of Code ('Code Injection') vulnerability in pilgrimage233 Minecraft-Rcon-Manage.This issue affects Minecraft-Rcon-Manage: before 3.0.","modified":"2026-08-12T15:32:57.064994Z","published":"2026-01-27T15:50:52.952Z","database_specific":{"cna_assigner":"GovTech CSG","cwe_ids":["CWE-94"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24871.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24871.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24871"},{"type":"FIX","url":"https://github.com/pilgrimage233/Minecraft-Rcon-Manage/pull/13"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pilgrimage233/minecraft-rcon-manage","events":[{"introduced":"0"},{"fixed":"85e766c1191e801d278f5ebd0ffbcf83fea94ac0"}],"database_specific":{"source":["AFFECTED_FIELD","DESCRIPTION"],"extracted_events":[{"introduced":"0"},{"fixed":"3.0"}]}}],"versions":["v3.0-pre9.20251208","v3.0-pre8.20251201","v3.0-pre7.20251129","v3.0-pre6.20251124","v3.0-pre5.20251122","v3.0-pre4.20251113","v3.0-pre3.20251112","v3.0-pre2.20251111","v3.0-pre1.20251111","v2.10.3","v2.10.2","v2.10.1","v2.10","v2.9.1","v2.9","v2.8.2","v2.8.1","v2.8","v3.0_Preview","v2.7.0","v2.6.2","v2.6.1","v2.6.0","v2.5.6","v2.5.5","v2.5.4","v2.5.3","v2.5.2","v2.5.1","v2.5","v2.4.6.1","v2.4.6","v2.4.5","v2.4.4","v2.4.3.1","v2.4.3","v2.4.2.1","v2.4.2","v2.4.1","v2.4.0.1","v2.4","v2.3.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24871.json","vanir_signatures_modified":"2026-08-12T15:32:57Z","vanir_signatures":[{"id":"CVE-2026-24871-01eb800a","signature_type":"Line","signature_version":"v1","source":"https://github.com/pilgrimage233/minecraft-rcon-manage/commit/85e766c1191e801d278f5ebd0ffbcf83fea94ac0","target":{"file":"endless-node/src/main/java/cc/endmc/node/service/INodeEnvService.java"},"deprecated":false,"digest":{"line_hashes":["81692440968828757789883021662764468705","216948295118592030259121029591164315111"],"threshold":0.9}},{"id":"CVE-2026-24871-18bc80fa","signature_type":"Line","signature_version":"v1","source":"https://github.com/pilgrimage233/minecraft-rcon-manage/commit/85e766c1191e801d278f5ebd0ffbcf83fea94ac0","target":{"file":"endless-node/src/main/java/cc/endmc/node/utils/ApiUtil.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["40383256800616642247125703570197077231","153275161418052868898988661936849114092","49503581163636614489045638610369353606","247211380944185868511291902972757031620","69267302616844360690530642096130934539"]}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["17386338171625597563386528109919805893","91256809957659564610790585017106051574"]},"id":"CVE-2026-24871-73da8a0f","signature_type":"Line","signature_version":"v1","source":"https://github.com/pilgrimage233/minecraft-rcon-manage/commit/85e766c1191e801d278f5ebd0ffbcf83fea94ac0","target":{"file":"endless-node/src/main/java/cc/endmc/node/controller/NodeEnvController.java"}},{"deprecated":false,"digest":{"line_hashes":["209203654210554789646804779908096208107","202953112843188937063638618963593920600"],"threshold":0.9},"id":"CVE-2026-24871-849aa926","signature_type":"Line","signature_version":"v1","source":"https://github.com/pilgrimage233/minecraft-rcon-manage/commit/85e766c1191e801d278f5ebd0ffbcf83fea94ac0","target":{"file":"endless-node/src/main/java/cc/endmc/node/service/impl/NodeEnvServiceImpl.java"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}]}