Skip to main content

CERT/CC advisory VU#456950 covers Komodo Periphery command injection flaw

Source Decision Insights Threat Desk Published October 13, 2026 Companies 2
Human View Machine View

2 companies named across 2 categories, one of 2 articles referencing VU. Previous coverage: AI training portals, cloud sandboxes, and security advisories - Week of September 28, 2026 (Sep 2026).

Companies mentioned

Best suited for

Seniority
Staff
Job function
Cybersecurity / Information Security
Persona
Platform / Infrastructure Engineer
Buyer role
Technical Implementer / Administrator
Decision stage
Post Buy
Adoption curve
Early Majority
Technology maturity
Established Technology
Industry
Information Technology / Cloud & Infrastructure Software / Cloud Infrastructure, Automation & Platform Engineering / Container Management & Kubernetes

Our classification, not the publisher's statement. Best suited for, not only for.

Periphery, an agent service within the open-source Komodo server and deployment manager, contains an OS command injection vulnerability that can let an authenticated attacker run arbitrary commands on the underlying host.

Versions less than or equal to 2.2.0 are affected, tracked as CVE-2026-110005. Periphery does not properly validate user-supplied Docker container names before inserting them into sh -c shell commands. Two operations carry the flaw: container destruction, through DestroyContainer and RemoveContainer, and container log searches, through SearchContainerLog and GetContainerLogSearch. Raw container names are placed directly into these command lines without shell escaping or validation, and the commands run with root privileges on the host OS and the Docker socket.

An authenticated non-admin user can escalate privileges through OS command injection by supplying a maliciously crafted container name. Successful exploitation enables arbitrary command execution as root on a target server within a Komodo deployment. This can allow an attacker to establish persistence, achieve lateral movement, and completely compromise the managed infrastructure of a user or organization.

Komodo was contacted to coordinate this vulnerability, and a patch has been implemented to remediate the issue in versions 2.3.0 and higher.

CERT/CC advises all users to update without delay. Muhammadjon Ahmadjonov is credited with reporting the vulnerability.

Blog post, originally published by Alex Lewis at kb.cert.org.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/certcc-advisory-vu456950-covers-komodo-periphery-command-injection-flaw/",
        "name": "CERT/CC advisory VU#456950 covers Komodo Periphery command injection flaw",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/certcc-advisory-vu456950-covers-komodo-periphery-command-injection-flaw/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@type": "Organization",
      "name": "Komodo Cloud"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "Staff"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Cybersecurity / Information Security"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Platform / Infrastructure Engineer"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Technical Implementer / Administrator"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Technology maturity",
        "audienceType": "Established Technology"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Cloud & Infrastructure Software / Cloud Infrastructure, Automation & Platform Engineering / Container Management & Kubernetes"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-10-13T13:41:30-06:00",
    "datePublished": "2026-10-13T13:41:26-06:00",
    "description": "CERT/CC advisory VU#456950 describes an OS command injection flaw in Komodo Periphery versions up to 2.2.0, which is fixed in versions 2.3.0 and higher.",
    "headline": "CERT/CC advisory VU#456950 covers Komodo Periphery command injection flaw",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Alex Lewis"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://kb.cert.org/vuls/id/456950"
    },
    "keywords": [
      "Server",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/certcc-advisory-vu456950-covers-komodo-periphery-command-injection-flaw/",
      "@type": "WebPage",
      "sdDatePublished": "2026-10-13",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/docker-inc/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/docker-inc/",
        "name": "Docker"
      },
      {
        "@id": "https://decisioninsights.ai/registry/vu/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/vu/",
        "name": "VU"
      },
      {
        "@id": "https://decisioninsights.ai/projects/docker/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/docker/",
        "name": "Docker"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages