tocsin

Go/github.com/openchoreo/openchoreo CVE-2026-73667: high 8.8, EPSS 0.86%

OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

Action: Upgrade github.com/openchoreo/openchoreo to 1.0.4 or later.

go get github.com/openchoreo/openchoreo@v1.0.4
go get github.com/openchoreo/openchoreo@v1.1.4
go get github.com/openchoreo/openchoreo@v1.2.0-rc.2

Affected

introducedfixedlast affected
01.0.4-
1.1.01.1.4-
1.2.0-rc.11.2.0-rc.2-

Fixed versions

1.0.41.1.41.2.0-rc.2

Sources

CVE-2026-73667 · published · modified · JSON