Owl OPDS Command Injection Vulnerability
Vulnerability
A command injection vulnerability has been identified in Owl OPDS version 2.2.0.4. This issue arises from improper neutralization of special elements in network requests, allowing attackers to execute arbitrary commands on the server.
Impact
Exploitation of this vulnerability allows for arbitrary command execution on the server where Owl OPDS is running.
Added: Feb 20, 2026, 5:48 PM
Updated: Feb 20, 2026, 7:18 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.0remediation
0.0relevance
3.2threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.