Command Injection Vulnerability in CoolerControl by CoolerControl

CVE-2026-5208

What is CVE-2026-5208?

A command injection flaw exists in CoolerControl versions prior to 4.0.0, which permits authenticated attackers to execute arbitrary code with root privileges. This vulnerability is triggered through maliciously crafted alert names, where injected bash commands can be processed by the system. Consequently, this poses serious security risks enabling unauthorized control and exploitation of the affected system.

References