PatchTheCVECVE-2024-27115: A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool
CVE-2024-27115 is a critical-severity flaw (CVSS 9.8) affecting soplanning. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this vulnerability, an attacker can upload executable files that are moved to a publicly accessible folder before verifying any requirements. This leads to the possibility of execution of code on the underlying system when the file is triggered. The vulnerability has been remediated in version 1.52.02.
Why this priority
- Critical severity
- EPSS top 8%: very likely to be exploited
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 4.6% (top 8%) |
| CISA exploited list | No |
| Weakness | CWE-434 |
| Published | 2024-09-11 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Nuclei scan template: SOPlanning - Remote Code Execution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-27115?
soplanning: upgrade to 1.52.02. Exact commands for each OS are on this page.
Is CVE-2024-27115 being exploited?
CVE-2024-27115 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-27115 affect?
CVE-2024-27115 affects soplanning. Severity is critical (CVSS 9.8). A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this vulnerability, an attacker can upload executable files that are moved to a publicly accessible folder before verifying a
How urgent is CVE-2024-27115?
Priority 62/100. Critical severity; EPSS top 8%: very likely to be exploited; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2025-62294 HIGH 7.5 UPGRADE SOPlanning is vulnerable to Predictable Generation of Password Recovery Token
- CVE-2025-62730 HIGH 8.8 UPGRADE SOPlanning is vulnerable to Privilege Escalation in user management tab
- CVE-2025-41001 MEDIUM 5.4 DOWNGRADE Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a
- CVE-2025-62293 MEDIUM 5.4 UPGRADE SOPlanning is vulnerable to Broken Access Control in /status endpoint
- CVE-2025-62295 MEDIUM 5.4 UPGRADE SOPlanning is vulnerable to Stored XSS in /groupe_form endpoint