Executive brief
OliveTin has Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint in github.com/OliveTin/OliveTin
Affected products
- Go github.com/OliveTin/OliveTin
Junglewise Threat Intelligence
CVE-2026-28342: GO-2026-4584 - OliveTin has Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint in github.com/OliveTin/OliveTin
CVE-2026-28342 · Severity: low · CVSS 3.1 · Published 2026-03-10
Technologies: github.com/OliveTin/OliveTin (Go). Vendors: Go.
Related threats
- OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is inte
- OliveTin incorrect authorization in synchronous execution endpoints
- OliveTin OS command injection in regex argument validation
- OliveTin memory exhaustion via unbounded OAuth2 state map growth
- OliveTin missing authorization in ValidateArgumentType API