Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.4
sonar-scanner can be tricked by crafted config files
published 4 days ago
Summary
The sonar-scanner tool may mishandle specially crafted configuration files, allowing an attacker to execute unwanted actions. This could let someone alter scans or access data they shouldn't. Update to the latest version of sonar-scanner or apply the vendor's recommended fix to protect your system.
What to do
- Update cleanstart sonar-scanner to version 8.0.1.6346-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | sonar-scanner |
< 8.0.1.6346-r0 Fix: upgrade to 8.0.1.6346-r0
|
Original advisory text
ACE vulnerability in configuration file processing by QOS
Security vulnerability affects the sonar-scanner package. ACE vulnerability in configuration file processing by QOS.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-EB16054 · OSV
Track software like this
Free during beta