CVE-2026-100852 | AzuraCast up to 0.23.x Liquidsoap config generation process.run Username os command injection

A vulnerability, which was classified as critical, was found in AzuraCast up to 0.23.x. The affected element is the function process.run of the component Liquidsoap config generation. The manipulation of the argument Username results in os command injection.

This vulnerability is known as CVE-2026-100852. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More