---
id: "CVE-2026-104383"
kind: "vulnerability"
aliases: ["CVE-2026-104383"]
title: "EagleCloud Aquila Pigeon MFA service: code injection lets authenticated attackers run code"
severity: "critical"
cvss: 9.4
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["aquila", "eaglecloud", "mfa", "on-premises", "other"]
not_affected_if: ["cloud-hosted"]
published_at: "2026-10-28T05:16:59+00:00"
first_seen_at: "2026-10-28T05:31:15+00:00"
updated_at: "2026-10-28T05:32:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104383", "first_seen_at": "2026-10-28T05:31:15+00:00"}]
---

# EagleCloud Aquila Pigeon MFA service: code injection lets authenticated attackers run code

Pigeon MFA service in EagleCloud Aquila through 2.6.7.2 on on-premises installs has an improper code generation flaw (CWE-94 style code injection). An authenticated remote attacker can inject input that is executed as code on the server.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Aquila version against `2.6.7.2`; the sources say versions through 2.6.7.2 are affected
- Confirm whether the Pigeon MFA service is deployed in your Aquila on-premises installation
- unknown for other exact check commands or files

## Fix

- Upgrade Aquila to a version later than `2.6.7.2` once the vendor publishes a fixed release (fixed version not stated in the sources)
- Until patched, restrict access to the Pigeon MFA service to trusted users
- unknown for vendor advisory or patch details

## Timeline

- 2026-10-28T05:31:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-104383

## From the sources

Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_