{"id":"CVE-2026-118869","kind":"vulnerability","aliases":["CVE-2026-118869"],"related":[],"title":"SHIRASAGI 1.19.0–1.21.0: OS command injection in Open Data dataset harvest import","description":"An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.","summary":"SHIRASAGI (Japanese open-source CMS) v1.19.0 to v1.21.0 passes the harvest import 'URL' field of an Open Data dataset to an OS command. A logged-in user with permission to manage Open Data datasets and harvest imports can run arbitrary commands on the server (vendor's example: URL set to '|touch /tmp/hacked', then click 'Import dataset'). Fixed in v1.21.1. No exploitation in the wild reported.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"shirasagi","fixed":["1.21.1"],"affected":">= 1.19.0, <= 1.21.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["cms","command-injection","open-data","other","self-hosted","shirasagi"],"not_affected_if":["auth-required","no-shirasagi-install","open-data-not-configured","version-1.18.2-or-earlier"],"how_to_check":"Check your SHIRASAGI version. Affected: v1.19.0 through v1.21.0. Not affected: v1.18.2 and earlier (no harvest feature or a safe implementation) and v1.21.1 or later. Also check whether Open Data is set up and which accounts have permission to manage Open Data datasets and their harvest imports; review existing harvest import URL fields for shell characters such as '|'.","fix":"Upgrade SHIRASAGI to v1.21.1, or apply upstream commit 98eca87586f4a6f74114fdfa7a6b88d3e49af029 (https://github.com/shirasagi/shirasagi/commit/98eca87586f4a6f74114fdfa7a6b88d3e49af029).","status":"open","published_at":"2026-11-05T09:17:05+00:00","first_seen_at":"2026-11-05T09:38:09+00:00","triaged_at":"2026-11-05T09:38:34+00:00","updated_at":"2026-11-05T09:39:41+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-05T09:38:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"SHIRASAGI: OS command injection lets an authenticated user run system commands","impact":"high","summary":"SHIRASAGI, a Japanese government web content management system, has an OS command injection flaw. An attacker with a valid account can run arbitrary operating system commands on the server hosting the product.","audience":"businesses","category":"other","nicknames":[],"who_cares":["shirasagi","self-hosted"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker runs arbitrary OS commands on the server hosting SHIRASAGI","analyst_note":"Find the affected SHIRASAGI versions, the vulnerable feature and the fixed release from the NVD entry or the vendor's advisory.","how_to_check":"- Check whether SHIRASAGI is deployed in your environment, and which version (version data not given in the sources).\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-shirasagi-install","auth-required"],"who_is_affected":"Organisations running SHIRASAGI as a web content management system. The sources do not name affected versions or the specific feature that is vulnerable, so the exposure scope is unknown. Installations where few people hold accounts carry less risk, but the sources do not say how the attacker gets in beyond needing authentication.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000675,"input_tokens":4180,"output_tokens":514,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected SHIRASAGI versions, the vulnerable feature and the fixed release from the NVD entry or the vendor's advisory.","search":"'-118869':15A,18A '-2026':14A,17A '/tmp/hacked':85B '1.19.0':2A '1.21.0':3A 'allow':109C 'arbitrari':73B,115C 'attack':112C 'authent':111C 'click':87B 'cms':20B,37B 'command':5A,22B,55B,74B,101C,117C 'command-inject':21B 'cve':13A,16A 'data':9A,26B,50B,66B 'dataset':10A,51B,67B,89B 'exampl':80B 'execut':114C 'exist':104C 'exploit':94B 'field':46B 'fix':90B 'harvest':11A,43B,69B 'host':30B 'import':12A,44B,70B,88B 'inject':6A,23B,102C 'japanes':33B 'log':58B 'logged-in':57B 'manag':64B 'may':108C 'open':8A,25B,35B,49B,65B 'open-data':24B 'open-sourc':34B 'os':4A,54B,100C,116C 'pass':41B 'permiss':62B 'product':123C 'report':98B 'run':72B,121C 'self':29B 'self-host':28B 'server':77B 'set':82B 'shirasagi':1A,19A,31B,32B,106C 'sourc':36B 'system':120C 'touch':84B 'url':45B,81B 'user':60B 'v1.19.0':38B 'v1.21.0':40B 'v1.21.1':92B 'vendor':78B 'vulner':103C 'wild':97B","nicknames":[],"mitigations":[],"who_affected":"Self-hosted SHIRASAGI sites running v1.19.0 to v1.21.0 that have Open Data configured. The attacker needs a login with permission to manage Open Data datasets and their harvest imports; they then enter a shell payload in the harvest import URL and run the import, executing commands as the web application on the server. v1.18.2 and earlier, v1.21.1 and later, and sites without Open Data or without such accounts can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-05T09:39:41Z","by":"analyst","doc":"https://github.com/shirasagi/shirasagi/commit/98eca87586f4a6f74114fdfa7a6b88d3e49af029","run_id":1768},"products":{"at":"2026-11-05T09:39:41Z","by":"analyst","doc":"https://github.com/shirasagi/shirasagi/commit/98eca87586f4a6f74114fdfa7a6b88d3e49af029","run_id":1768},"how_to_check":{"at":"2026-11-05T09:39:41Z","by":"analyst","doc":"https://github.com/shirasagi/shirasagi/commit/98eca87586f4a6f74114fdfa7a6b88d3e49af029","run_id":1768},"who_affected":{"at":"2026-11-05T09:39:41Z","by":"analyst","doc":"https://github.com/shirasagi/shirasagi/commit/98eca87586f4a6f74114fdfa7a6b88d3e49af029","run_id":1768}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["shirasagi"],"ptokens":["shirasagi"],"labels":["cms","commandinjection","high","opendata","other","selfhosted","shirasagi"],"campaign_type":null,"first_public_at":"2026-11-05T09:17:05+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"vultures@jpcert.or.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118869","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118869","severity":null,"published_at":"2026-11-05T09:17:05+00:00","modified_at":"2026-11-05T09:17:05+00:00","first_seen_at":"2026-11-05T09:38:09+00:00","fetched_at":"2026-11-05T09:38:09+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-118869:1768","url":"https://www.ss-proj.org/support/1743.html","severity":null,"published_at":"2026-11-05T09:39:41+00:00","modified_at":"2026-11-05T09:39:41+00:00","first_seen_at":"2026-11-05T09:39:41+00:00","fetched_at":"2026-11-05T09:39:41+00:00","note":"Vendor page ss-proj.org/support/1743.html and JVN#55454512 read: affected 1.19.0-1.21.0, fixed 1.21.1, commit 98eca87. Requires auth plus Open Data harvest permission. No exploit/PoC beyond vendor's repro steps; not exploited per sources. Sibling CVE-2026-117679 (XSS) is in the same advisory.","cites":["https://www.ss-proj.org/support/1743.html","https://jvn.jp/en/jp/JVN55454512/","https://github.com/shirasagi/shirasagi/commit/98eca87586f4a6f74114fdfa7a6b88d3e49af029"]}],"documents":[{"id":75011,"url":"https://www.ss-proj.org/support/1743.html","title":"JVN#55454512 SHIRASAGI XSS and OS command injection (vendor)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":75012,"url":"https://jvn.jp/en/jp/JVN55454512/","title":"JVN#55454512: Multiple vulnerabilities in SHIRASAGI","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":75013,"url":"https://github.com/shirasagi/shirasagi/commit/98eca87586f4a6f74114fdfa7a6b88d3e49af029","title":"Fix commit for CVE-2026-118869","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"fix","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}