---
id: "CVE-2026-113644"
kind: "vulnerability"
aliases: ["CVE-2026-113644"]
title: "Eclipse ioFog iofogctl: API response values run as shell commands"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["edge-computing", "iofog", "iofogctl", "package", "self-hosted", "ssh"]
not_affected_if: ["fixed-version", "not-using-iofog", "trusted-controller-path"]
published_at: "2026-10-27T12:17:05+00:00"
first_seen_at: "2026-10-27T12:31:37+00:00"
updated_at: "2026-10-27T12:32:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113644", "first_seen_at": "2026-10-27T12:31:37+00:00"}]
---

# Eclipse ioFog iofogctl: API response values run as shell commands

iofogctl builds shell commands by concatenating the provisioning key and CA certificate returned by the Controller API, then runs them over SSH on agent hosts and locally. A party who can alter that API response can inject shell metacharacters to run extra commands on the agent host when an operator deploys or attaches an agent.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `iofogctl version` and compare against the affected range: 1.0.0 through 3.7.0, and 3.8.0-rc.1 through 3.9.1.
- Check whether the Controller API responses are reachable by anyone who could tamper with them, such as over an untrusted network path.

## Fix

- Upgrade iofogctl to `3.9.2`.
- Until upgraded, deploy and attach agents only through a trusted, authenticated Controller connection.

## Timeline

- 2026-10-27T12:31:37+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113644

## From the sources

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cert` on supported releases; `iofog-agent provision` and `iofog-agent cert` on older releases) that run over SSH on a remote agent host and via a local shell. A party who can change that API response can include shell metacharacters and cause the operator's CLI to run additional commands on the agent host when the operator deploys or attaches an agent. This is fixed in version 3.9.2.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_