Kottster vulnerabilities
We track 1 vulnerability in Kottster products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2025.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Kottster vulnerabilities
- 7.2 High severity
kottster: Improper Neutralization of Special Elements used in an OS Command
Kottster is a self hosted Node.js admin panel. From versions 3.2.0 to before 3.3.2, Kottster contains a pre-authentication remote code execution (RCE) vulnerability when running in development mode. This affects development mode only, production deployments we