radar vulnerabilities

1 known vulnerability in radar from Skyhook-io. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  radar: Missing Authorization

  CVE-2026-82026Oct 14, 2026Skyhook-io

  Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check in