Komodo on Ravindu Lakmina Munaweera

Komodo on Ravindu Lakmina Munaweera - Security Research https://ravindulakmina.pages.dev/tags/komodo/ Recent content in Komodo on Ravindu Lakmina Munaweera - Security Research Hugo en-us Wed, 14 Oct 2026 00:00:00 +0000 CVE-2026-110631: Anyone Could Run Commands on Your Komodo Hosts — Fail-Open Auth in Periphery https://ravindulakmina.pages.dev/advisories/cve-2026-110631-komodo-periphery-fail-open-rce/ Wed, 14 Oct 2026 00:00:00 +0000 https://ravindulakmina.pages.dev/advisories/cve-2026-110631-komodo-periphery-fail-open-rce/ Every Komodo Periphery release through 2.3.3 authorizes any client when no keys are configured — the default. Unauthenticated remote code execution as root, across both the v1.x and v2.x architectures. CVSS 9.8.