Medium severityNVD Advisory· Published May 14, 2026· Updated May 14, 2026

CVE-2026-44371

Description

Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixed in 4.0.11, 4.1.5, and 4.2.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Open OnDemand/Open OnDemandllm-create
Range: prior to 4.0.11, 4.1.5, and 4.2.2

Patches

Vulnerability mechanics

References

github.com/OSC/ondemand/security/advisories/GHSA-xcv4-m435-m33hnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000