Executive brief
Chaos Controller Manager is vulnerable to OS command injection in github.com/chaos-mesh/chaos-mesh
Affected products
- Go github.com/chaos-mesh/chaos-mesh
Junglewise Threat Intelligence
CVE-2025-59360: GO-2025-3954 - Chaos Controller Manager is vulnerable to OS command injection in github.com/chaos-mesh/chaos-mesh
CVE-2025-59360 · Severity: low · CVSS 3.1 · Published 2025-09-17
Technologies: github.com/chaos-mesh/chaos-mesh (Go). Vendors: Go.
Related threats
- GO-2025-3952 - Chaos Controller Manager is vulnerable to OS command injection in github.com/chaos-mesh/chaos-mesh
- GO-2025-3949 - Chaos Controller Manager is vulnerable to OS command injection in github.com/chaos-mesh/chaos-mesh
- GO-2025-3951 - Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function in github.com/chaos-mesh/chaos-mesh