uselagoon CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL uselagoon CVE published 2026-10-21

CVE-2026-113788

CVE-2026-113788 is a critical vulnerability in the Lagoon core ssh service that allows remote code execution. The vulnerability affects Lagoon versions prior to 2.33.2 and requires a Lagoon user account for exploitation. Detection can be attempted by checking container logs for 'too many arguments'. The vulnerability was fixed in Lagoon v2.33.2. As a workaround, the ssh service in Lagoon core can be disabled.