CVE-2026-69100
Received Received - Intake

Remote Code Execution in LAMP Rapid Development Platform

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: VulnCheck

Description
LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the script field via message template endpoints to execute arbitrary Groovy code and OS commands on the backend server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-69100
EUVD
EUVD-2026-52741

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
lamp rapid_development_platform 5.6.2
dromara lamp-cloud to 5.6.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-69100 is a remote code execution vulnerability in LAMP Rapid Development Platform through version 5.6.2. It allows attackers to execute arbitrary Groovy code and OS commands on the backend server by injecting unsandboxed Groovy scripts into database template fields via message template endpoints. The flaw exists in the GlueFactory component which processes these scripts without compilation restrictions or whitelisting.

Detection Guidance

To detect this vulnerability, inspect your LAMP Rapid Development Platform logs for suspicious Groovy script execution attempts. Check for requests to endpoints like /defMsgTemplate/save or /anyUser/extendMsg/sendByTemplate that contain script fields with dangerous tokens such as Runtime, ProcessBuilder, File, or exec. Monitor for unexpected system command outputs in files or logs.

Impact Analysis

If exploited, attackers can gain full control over the backend service. This enables reading environment variables, accessing application configurations, connecting to databases, making internal network requests, or executing arbitrary system commands. Attackers could steal sensitive data, modify system behavior, or use the server as a launch point for further attacks.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and security controls. It could lead to unauthorized access to personal data (GDPR Article 32), unauthorized disclosure of protected health information (HIPAA Security Rule), or failure to implement proper access controls and audit mechanisms.

Mitigation Strategies

Immediately upgrade to a version of LAMP Rapid Development Platform that includes commit 84b0c27 or later. If upgrading is not possible, disable dynamic Groovy script execution in the GlueFactory component and remove unsandboxed script execution from template fields. Implement strict input validation and sandboxing for any Groovy execution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69100. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart