CVE-2024-55964

9.8 criticalEPSS 6.8%

Critical (9.8) in appsmith appsmith. EPSS 6.8% chance of exploitation in the next 30 days.

An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 6.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2025-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

appsmith:appsmith

References

https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83

Check your stack JSON