olivetin vulnerabilities and fixes
Recent CVEs affecting olivetin, with upgrade or downgrade steps. 10 tracked.
olivetin has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-03-10. Highest priority: CVE-2026-27626 (score 52/100).
- CVE-2026-31817 HIGH 8.5 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-30233 MEDIUM 6.5 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-30225 MEDIUM 5.3 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-30224 MEDIUM 5.4 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-30223 HIGH 8.8 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-28790 HIGH 7.5 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-28789 HIGH 7.5 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-28342 HIGH 7.5 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2026-27626 CRITICAL 9.9 UPGRADE OliveTin gives access to predefined shell commands from a web interface
- CVE-2025-50946 MEDIUM 6.5 DOWNGRADE OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/
FAQ
How do I fix olivetin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is olivetin being exploited right now?
None of the tracked olivetin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which olivetin CVE should I patch first?
CVE-2026-27626 currently ranks highest (52/100): OliveTin gives access to predefined shell commands from a web interface.