---
id: "CVE-2026-105044"
kind: "vulnerability"
aliases: ["CVE-2026-105044"]
title: "Qingteng host security platform: admin can run OS commands on clients"
severity: "high"
cvss: 8.5
epss: 0.00936
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["host-monitoring", "infrastructure", "qingteng", "self-hosted"]
not_affected_if: ["not-qingteng-platform", "patched-toolbox"]
published_at: "2026-10-21T01:17:19+00:00"
first_seen_at: "2026-10-23T21:57:27+00:00"
updated_at: "2026-10-25T03:00:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105044", "first_seen_at": "2026-10-23T21:57:27+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-105044", "first_seen_at": "2026-10-24T13:15:55+00:00"}]
---

# Qingteng host security platform: admin can run OS commands on clients

Security Toolbox in the Qingteng Host Adaptive Security Platform V3.0 does not neutralize special characters in a command, so OS command injection is possible. An authenticated console administrator can run arbitrary commands on every attached client host.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Upgrade Security Toolbox to version `20260929` or later, per the sources.

## Timeline

- 2026-10-23T21:57:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105044
- 2026-10-24T13:15:55+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-105044

## From the sources

Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 allows an authenticated console administrator to execute arbitrary commands on attached clients via OS command injection

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_