Security Advisory
CVE-2024-39148
8.1
HIGH
Vulnerability Description
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall.
Published Date
December 1, 2025
Official Source
NIST NVD Advisory