PT-2026-44077 · Oneuptime · Oneuptime

Cristianstaicu · CVE-2026-45102 · Published 2026-05-27 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OneUptime versions prior to 10.0.98

Description OneUptime is an open-source monitoring and observability platform. The software uses the Node.js vm module as an isolation primitive. Because this API was not designed for isolation, it can be escaped through the use of error objects and infinite recursion.

Recommendations Update to version 10.0.98.

Exploit

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2026-45102

Affected Products

Oneuptime

References · 5

• 🔥 https://github.com/OneUptime/oneuptime/security/advisories/GHSA-g9cp-35m2-fjv6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-45102 · Security Note
• https://t.me/cveNotify/165508 · Telegram Post
• https://twitter.com/CVEnew/status/2059718097557451240 · Twitter Post
• https://t.me/cveNotify/165284 · Telegram Post