Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino compiler without enforcing a secure sandbox, so an authenticated user with the ChangeMissionDatabase privilege could override an existing algorithm's text via the mission database REST API and inject Java code (for example using java.lang.Runtime) to achieve remote code execution on the underlying host operating system. This issue is fixed in versions 5.12.7 and 5.13.0, which disable algorithm editing by default.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44632.json",
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-94"
]
}{
"cpe": "cpe:2.3:a:spaceapplications:yamcs:*:*:*:*:*:*:*:*",
"source": [
"CPE_RANGE",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "5.12.7"
}
]
}[
{
"digest": {
"length": 932.0,
"function_hash": "69355675553311376643589385243698277354"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Function",
"target": {
"function": "toProcessorInfo",
"file": "yamcs-core/src/main/java/org/yamcs/management/ManagementGpbHelper.java"
},
"id": "CVE-2026-44632-04f7a4d8",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"118472431196787253798227417740529609675",
"227534305263495817904090678370684991051",
"302556645775454226571877765696569162178",
"101870416697812885281175895936987823145"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/management/ManagementGpbHelper.java"
},
"id": "CVE-2026-44632-0c0f33ed",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"241964768224116477582902244589299546982",
"264618694949394964591810732105671936051",
"243951618940424637021969782073687193567",
"191739151144059097785721734425842506822"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaAlgorithmEngine.java"
},
"id": "CVE-2026-44632-14d16737",
"deprecated": false
},
{
"digest": {
"length": 985.0,
"function_hash": "220339536036710192205152816864115849807"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Function",
"target": {
"function": "makeExecutor",
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaExprAlgorithmExecutionFactory.java"
},
"id": "CVE-2026-44632-206fd7af",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"213522417048489447241701557021121831056",
"234143975878213723898535080372481131947",
"296790635253047111773691550875626230709",
"136520459794390772046731156641227227837",
"244192829958875455441366520489480387708",
"25268749546252786537460022743686834267",
"145242089655594372309734656883358404204",
"258642614959399704284526605101622267718",
"72060053231437526835077110631347325575"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/http/MethodNotAllowedException.java"
},
"id": "CVE-2026-44632-2c173391",
"deprecated": false
},
{
"digest": {
"length": 167.0,
"function_hash": "260610546637626123805002840882711416733"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Function",
"target": {
"function": "MethodNotAllowedException",
"file": "yamcs-core/src/main/java/org/yamcs/http/MethodNotAllowedException.java"
},
"id": "CVE-2026-44632-35c66300",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"213522417048489447241701557021121831056",
"234143975878213723898535080372481131947",
"296790635253047111773691550875626230709",
"136520459794390772046731156641227227837",
"244192829958875455441366520489480387708",
"25268749546252786537460022743686834267",
"145242089655594372309734656883358404204",
"258642614959399704284526605101622267718",
"72060053231437526835077110631347325575"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/http/MethodNotAllowedException.java"
},
"id": "CVE-2026-44632-3693809e",
"deprecated": false
},
{
"digest": {
"length": 932.0,
"function_hash": "69355675553311376643589385243698277354"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Function",
"target": {
"function": "toProcessorInfo",
"file": "yamcs-core/src/main/java/org/yamcs/management/ManagementGpbHelper.java"
},
"id": "CVE-2026-44632-4fdb4fbd",
"deprecated": false
},
{
"digest": {
"length": 286.0,
"function_hash": "297137259703460955890591782753343069421"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Function",
"target": {
"function": "makeExecutorFactory",
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaAlgorithmEngine.java"
},
"id": "CVE-2026-44632-523c0cf3",
"deprecated": false
},
{
"digest": {
"length": 1457.0,
"function_hash": "175403622394224181677557170001566330023"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Function",
"target": {
"function": "updateAlgorithm",
"file": "yamcs-core/src/main/java/org/yamcs/http/api/MdbOverrideApi.java"
},
"id": "CVE-2026-44632-5349e9c2",
"deprecated": false
},
{
"digest": {
"length": 985.0,
"function_hash": "220339536036710192205152816864115849807"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Function",
"target": {
"function": "makeExecutor",
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaExprAlgorithmExecutionFactory.java"
},
"id": "CVE-2026-44632-612381e8",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"116879197966182653300641218375797722160",
"269589951678138429283507016451010003912",
"95678968355699007854897787606507491205",
"136571010188212296716841914283842932502",
"55611388841657817681863264570128896904",
"213383566593331879331805975679889274964",
"50071560271865428154558529131891505009",
"286314923178870231391490119533903382494",
"292290321104374562557050320643769905310",
"283146188330103590308974444058737040632",
"102348920905366318743752617118356945540",
"246584551490247390194164403492194433061",
"243335454619869312221313109743921216343",
"126636625686844119497204723182823984261",
"165613062703332532150763729313052063047",
"52829834940496467358929413767387663117",
"14882860157474640720836206264010067111",
"241569034141604689740120675869394275477",
"29403360697770534985431426799854614051",
"35822338048705794528421113291566706416"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/http/api/MdbOverrideApi.java"
},
"id": "CVE-2026-44632-6e03a7d2",
"deprecated": false
},
{
"digest": {
"length": 1457.0,
"function_hash": "175403622394224181677557170001566330023"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Function",
"target": {
"function": "updateAlgorithm",
"file": "yamcs-core/src/main/java/org/yamcs/http/api/MdbOverrideApi.java"
},
"id": "CVE-2026-44632-70afa7e8",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"161398523729895336014706138350641318553",
"273220274344893915142642825170251883527",
"48506070067915461587706010341681522907",
"17224658079551879234134642541021083385",
"154111289746572360652317409728122795556",
"235406883681263632732240869220442004585",
"248375046485230268078905611178863315395",
"107823101378711850844522202333308755219"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaExprAlgorithmExecutionFactory.java"
},
"id": "CVE-2026-44632-70ea5aac",
"deprecated": false
},
{
"digest": {
"length": 1817.0,
"function_hash": "310190026549143569023136059797516033463"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Function",
"target": {
"function": "ProcessorConfig",
"file": "yamcs-core/src/main/java/org/yamcs/ProcessorConfig.java"
},
"id": "CVE-2026-44632-8b21ebc1",
"deprecated": false
},
{
"digest": {
"length": 1276.0,
"function_hash": "125739421591477469292252992573794845728"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Function",
"target": {
"function": "getSpec",
"file": "yamcs-core/src/main/java/org/yamcs/ProcessorConfig.java"
},
"id": "CVE-2026-44632-8c4feb75",
"deprecated": false
},
{
"digest": {
"length": 1817.0,
"function_hash": "310190026549143569023136059797516033463"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Function",
"target": {
"function": "ProcessorConfig",
"file": "yamcs-core/src/main/java/org/yamcs/ProcessorConfig.java"
},
"id": "CVE-2026-44632-8f9038b5",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"241964768224116477582902244589299546982",
"264618694949394964591810732105671936051",
"243951618940424637021969782073687193567",
"191739151144059097785721734425842506822"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaAlgorithmEngine.java"
},
"id": "CVE-2026-44632-a0541487",
"deprecated": false
},
{
"digest": {
"length": 167.0,
"function_hash": "260610546637626123805002840882711416733"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Function",
"target": {
"function": "MethodNotAllowedException",
"file": "yamcs-core/src/main/java/org/yamcs/http/MethodNotAllowedException.java"
},
"id": "CVE-2026-44632-a57e58e0",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"275675998073552014589457695235223354736",
"243292281897350605820333332665474372045",
"159920416838663192370557722461744309802",
"296524083713015601103628216142848717481",
"71343476542026263028502927347429551607",
"138254179028667012550324752460260128139",
"308091913777530617795881085649730092866",
"197368091857767893483598795932471677791",
"68779081931427277189682738499459662324",
"315344999381674866719205285454525321052",
"125025447958032509055844866081243052765",
"45124006906409455888882639398851057809",
"251788913655107564963074641647600355754",
"16264177457412682665257442453032609666",
"272829936388159473589666872571130738229",
"82152106211157360190784365681138671197",
"161696270339652931536471880449971489993",
"328062286430530347737984268037828921179",
"187151550577727158485090025753362876365"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/ProcessorConfig.java"
},
"id": "CVE-2026-44632-c3e00ba6",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"275675998073552014589457695235223354736",
"243292281897350605820333332665474372045",
"159920416838663192370557722461744309802",
"296524083713015601103628216142848717481",
"71343476542026263028502927347429551607",
"138254179028667012550324752460260128139",
"308091913777530617795881085649730092866",
"197368091857767893483598795932471677791",
"68779081931427277189682738499459662324",
"315344999381674866719205285454525321052",
"125025447958032509055844866081243052765",
"45124006906409455888882639398851057809",
"251788913655107564963074641647600355754",
"16264177457412682665257442453032609666",
"272829936388159473589666872571130738229",
"82152106211157360190784365681138671197",
"161696270339652931536471880449971489993",
"328062286430530347737984268037828921179",
"187151550577727158485090025753362876365"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/ProcessorConfig.java"
},
"id": "CVE-2026-44632-cc915c84",
"deprecated": false
},
{
"digest": {
"length": 1276.0,
"function_hash": "125739421591477469292252992573794845728"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Function",
"target": {
"function": "getSpec",
"file": "yamcs-core/src/main/java/org/yamcs/ProcessorConfig.java"
},
"id": "CVE-2026-44632-dc6482d5",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"116879197966182653300641218375797722160",
"269589951678138429283507016451010003912",
"95678968355699007854897787606507491205",
"136571010188212296716841914283842932502",
"55611388841657817681863264570128896904",
"213383566593331879331805975679889274964",
"50071560271865428154558529131891505009",
"286314923178870231391490119533903382494",
"292290321104374562557050320643769905310",
"283146188330103590308974444058737040632",
"102348920905366318743752617118356945540",
"246584551490247390194164403492194433061",
"243335454619869312221313109743921216343",
"126636625686844119497204723182823984261",
"165613062703332532150763729313052063047",
"52829834940496467358929413767387663117",
"14882860157474640720836206264010067111",
"241569034141604689740120675869394275477",
"29403360697770534985431426799854614051",
"35822338048705794528421113291566706416"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/http/api/MdbOverrideApi.java"
},
"id": "CVE-2026-44632-de5ec556",
"deprecated": false
},
{
"digest": {
"length": 286.0,
"function_hash": "297137259703460955890591782753343069421"
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Function",
"target": {
"function": "makeExecutorFactory",
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaAlgorithmEngine.java"
},
"id": "CVE-2026-44632-e64180a1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"118472431196787253798227417740529609675",
"227534305263495817904090678370684991051",
"302556645775454226571877765696569162178",
"101870416697812885281175895936987823145"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/4ff8fda642ea8c3309a4d3f379aa77b763148992",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/management/ManagementGpbHelper.java"
},
"id": "CVE-2026-44632-f79102af",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"161398523729895336014706138350641318553",
"273220274344893915142642825170251883527",
"48506070067915461587706010341681522907",
"17224658079551879234134642541021083385",
"154111289746572360652317409728122795556",
"235406883681263632732240869220442004585",
"248375046485230268078905611178863315395",
"107823101378711850844522202333308755219"
]
},
"signature_version": "v1",
"source": "https://github.com/yamcs/yamcs/commit/3c550348f866af4675d2ba4a51d8d12b7c7c6011",
"signature_type": "Line",
"target": {
"file": "yamcs-core/src/main/java/org/yamcs/algorithms/JavaExprAlgorithmExecutionFactory.java"
},
"id": "CVE-2026-44632-fc557303",
"deprecated": false
}
]
"2026-07-22T04:28:39Z"
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44632.json"