← All advisories

Critical severity9.8NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026

CVE-2020-27730

CVE-2020-27730

Description

In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.

Affected products

2

NGINX/Controller Agentdescription
NGINX Controller/NGINX Controllerllm-fuzzy
Range: 3.0.0-3.9.0, 2.0.0-2.9.0, 1.0.1

Patches

Vulnerability mechanics

References

2

security.netapp.com/advisory/ntap-20210115-0004/nvdThird Party Advisory
support.f5.com/csp/article/K43530108nvdVendor Advisory

News mentions

0

No linked articles in our index yet.