VYPR
← All advisories
Critical severity9.9NVD Advisory· Published Dec 17, 2018· Updated Jun 17, 2026

CVE-2018-18555

CVE-2018-18555

Description

A sandbox escape issue was discovered in VyOS 1.1.8. It provides a restricted management shell for operator users to administer the device. By issuing various shell special characters with certain commands, an authenticated operator user can break out of the management shell and gain access to the underlying Linux shell. The user can then run arbitrary operating system commands with the privileges afforded by their account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Vyos/Vyos 1xinferred2 versions
    = 1.1.8+ 1 more
    • (no CPE)range: = 1.1.8
    • (no CPE)range: 1.1.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.