Java Injection Vulnerability in Yamcs Mission Control Framework
CVE-2026-55565
What is CVE-2026-55565?
The vulnerability in the Yamcs mission control framework stems from the improper handling of LIKE expressions in SQL queries. Specifically, the LikeExpression.fillCode_getValueReturn method inserts an unescaped LIKE pattern into Java source code through the Expression.getCompiledExpression function. This flaw allows attackers to inject malicious Java code, which executes within the context of the Yamcs server process. The issue manifests in various endpoints, including SQL execution, data streaming, and event retrieval operations. Notably, this security flaw has been remedied in versions 5.12.8 and 5.13.2, emphasizing the importance of upgrading to these versions to mitigate the risk of code injection.
Affected Version(s)
yamcs < 5.12.8 < 5.12.8
yamcs >= 5.13.0, < 5.13.2 < 5.13.0, 5.13.2