DIRACGrid vulnerabilities
We track 4 vulnerabilities in DIRACGrid products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
Latest DIRACGrid vulnerabilities
- 8.1 High severity
DIRAC: Improper Certificate Validation
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl._create_unverified_context to download the second-stage
- 9.9 Critical severity
DIRAC: Improper Neutralization of Special Elements used in an SQL Command
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetMa
- 9.9 Critical severity
DIRAC: Improper Neutralization of Directives in Dynamically Evaluated Code
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py export_getRequestCountersWeb function passes an authenticated caller-controlle
- 7.5 High severity
DIRAC: Exposure of Sensitive Information to an Unauthorized Actor
DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advise