CVE-2026-114278 | Eclipse Che up to 7.122.0 che-machine-exec username/namespace os command injection

October 28, 2026 Yanac

A vulnerability identified as critical has been detected in Eclipse Che up to 7.122.0. The affected element is an unknown function of the component che-machine-exec. The manipulation of the argument username/namespace leads to os command injection.

This vulnerability is documented as CVE-2026-114278. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More