RCE in Openkm Community Edition
CVE-2026-42785
OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scripting endpoint. Attackers can submit malicious script content with an action=Evaluate parameter to execute operating system commands in the context of the OpenKM application server.
Vulnerability class: RCE (Remote Code Execution)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.012 (66.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 67th percentile — 66.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.012 · change: +0.005
Affected products
- Openkm Community Edition — versions 0
- Openkm Professional Edition — versions 0
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/52520 (exploit)
- www.openkm.com/ (product)
- hub.docker.com/r/openkm/openkm-ce (product)
- terrasystemlabs.com/post (vendor-advisory)
- github.com/terrasystemlabs/Exploits/tree/main/OpenKM-Exploits (product)
- github.com/terrasystemlabs/Exploits/tree/main/OpenKM-Exploits/nuclei-templates/… (product)
- www.vulncheck.com/advisories/openkm-remote-code-execution-via-administrative-sc… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-42785?
- CVE-2026-42785 is a high-severity vulnerability in Openkm Community Edition, classified under Code Injection. CVSS score: 7.2/10. Published 2026-05-26.
- How severe is CVE-2026-42785?
- High severity. CVSS v3 base score is 7.2 out of 10.