Bohdan Triapitsyn vulnerabilities
We track 3 vulnerabilities in Bohdan Triapitsyn products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
Latest Bohdan Triapitsyn vulnerabilities
- 7.5 High severity
OpenChamber: Missing Authentication for Critical Functionality
OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middle
- 9.1 Critical severity
OpenChamber: Improper Limitation of a Pathname to a Restricted Directory
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query paramete
- 9.8 Critical severity
OpenChamber: Improper Neutralization of Special Elements used in an OS Command
OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn()