CVE-2025-68271

RubyGems/openc3 CVE-2025-68271: critical 10, EPSS 0.64%

openc3-api Vulnerable to Unauthenticated Remote Code Execution

Action: Upgrade openc3 to 6.10.2 or later.

bundle update openc3

Affected

Fixed versions

Sources

• osv: GHSA-w757-4qv9-mghp
• https://github.com/OpenC3/cosmos/security/advisories/GHSA-w757-4qv9-mghp
• https://nvd.nist.gov/vuln/detail/CVE-2025-68271
• https://github.com/OpenC3/cosmos/commit/01e9fbc5e66e9a2500b71a75a44775dd1fc2d1de
• https://github.com/OpenC3/cosmos
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/openc3/CVE-2025-68271.yml

CVE-2025-68271 · published 2026-01-13T19:01:49Z · modified 2026-02-03T02:56:30.118719Z · JSON