CVE-2026-66902 | CJCOLLIER Google::Auth up to 0.05 Pluggable make_creds command os command injection

August 4, 2026 Yanac

A vulnerability classified as critical was found in CJCOLLIER Google::Auth up to 0.05. This impacts the function make_creds of the component Pluggable. Executing a manipulation of the argument command can lead to os command injection.

This vulnerability is handled as CVE-2026-66902. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More