OS Command Injection in Looking Glass Network Diagnostic Platform by AS203038
CVE-2026-53611

9.8CRITICAL

Key Information:

Vendor

As203038

Status
Looking-glass
Vendor
CVE Published:
2 September 2026

What is CVE-2026-53611?

The Looking Glass platform, used for network diagnostics, is prone to an OS Command Injection vulnerability due to an unanchored regular expression in its input validation. This allows an attacker to execute arbitrary commands on the underlying server. Users are advised to upgrade to version 1.3.5 or later, where this issue has been addressed.

Affected Version(s)

looking-glass < 1.3.5

References

https://github.com/AS203038/looking-glass/security/adviso...
x_refsource_CONFIRM
https://github.com/AS203038/looking-glass/releases/tag/1.3.5
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.