# CVE-2026-108598: Floci VtlTemplateEngine code injection

Source: https://junglewise.ai/threats/cve-2026-108598-floci-1-1-0-before-2-2-0-contains-a-code-injection-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-10. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-108598 · Severity: critical · CVSS 9.8 · Published 2026-10-10

Floci is a local AWS emulator that runs in Docker. Versions 1.1.0 to 2.1.x contain a code injection flaw in the REST API template engine that allows attackers without credentials to execute arbitrary OS commands on the host server, gaining full control of the Floci application and its environment.

Technologies: [Floci-Io Floci](https://junglewise.ai/threats/technologies/floci). Vendors: [Floci-Io](https://junglewise.ai/threats/vendors/floci-io).

## Quick answers

**Is CVE-2026-108598 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-108598 being exploited in the wild.

**How severe is CVE-2026-108598?** Critical severity, with a CVSS score of 9.8, published 10 October 2026.

**Which products and versions are affected?** Floci-Io Floci 1.1.0 to 2.1.x.

**Is there a fix for CVE-2026-108598?** Yes: fixed in 2.2.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-108598 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-108598?** Check whether you run Floci-Io Floci at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 2.2.0

## Technical details

The VtlTemplateEngine component processes Velocity mapping templates without proper input validation, allowing attackers to create MOCK integrations that leverage Velocity's $util reflection features to access Java Runtime or ProcessBuilder classes. An unauthenticated attacker can craft a malicious REST API definition with a Velocity template that breaks out of the template sandbox and executes OS commands in the Floci JVM context.

## Affected products

- floci-io Floci 1.1.0 to 2.1.x

## Timeline

- 2026-10-10: disclosed

## References

- [https://github.com/floci-io/floci](https://github.com/floci-io/floci)
- [https://github.com/floci-io/floci/blob/560b3e4aae61cea3ac7d4d51843bdffd0e3085fd/src/main/java/io/github/hectorvent/floci/services/apigateway/VtlTemplateEngine.java](https://github.com/floci-io/floci/blob/560b3e4aae61cea3ac7d4d51843bdffd0e3085fd/src/main/java/io/github/hectorvent/floci/services/apigateway/VtlTemplateEngine.java)

## Related threats

- [floci-io Floci path traversal in S3 bucket name validation](https://junglewise.ai/threats/cve-2026-124509-a-vulnerability-was-identified-in-floci-io-floci-up-to-2-1-0-the)
- [floci-io Floci path traversal in artifact handler](https://junglewise.ai/threats/cve-2026-124508-a-vulnerability-was-determined-in-floci-io-floci-up-to-2-4-0)