CVE-2026-0980

RubyGems/rubyipmi CVE-2026-0980: high 8.3

rubyipmi is vulnerable to OS Command Injection through malicious usernames

Action: Upgrade rubyipmi to 0.13.0 or later.

bundle update rubyipmi

Affected

Fixed versions

Sources

• osv: GHSA-hfcp-477w-3wjw
• https://nvd.nist.gov/vuln/detail/CVE-2026-0980
• https://github.com/logicminds/rubyipmi/commit/252503a7b4dca68388165883b0322024e344a215
• https://access.redhat.com/errata/RHSA-2026:5968
• https://access.redhat.com/errata/RHSA-2026:5970
• https://access.redhat.com/errata/RHSA-2026:5971
• https://access.redhat.com/security/cve/CVE-2026-0980
• https://bugzilla.redhat.com/show_bug.cgi?id=2429874
• https://github.com/logicminds/rubyipmi
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubyipmi/CVE-2026-0980.yml

CVE-2026-0980 · published 2026-02-27T09:30:29Z · modified 2026-03-27T00:50:14.171499Z · JSON