Medium severity6.3NVD Advisory· Published Sep 18, 2026· Updated Sep 23, 2026
CVE-2026-93533
CVE-2026-93533
Description
A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command injection. It is possible to initiate the attack remotely. The pull request to fix this issue awaits acceptance.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
7- github.com/spatie/scotty/issues/20nvd
- github.com/spatie/scotty/pull/22nvd
- github.com/sumo166/CVE-apply/blob/main/spatie/scotty/Doctor%20Command%20Injection%20via%20Unescaped%20@servers%20Host%20(CWE-78)_cve.mdnvd
- vuldb.com/cve/CVE-2026-93533nvd
- vuldb.com/submit/943917nvd
- vuldb.com/vuln/407450nvd
- vuldb.com/vuln/407450/ctinvd
News mentions
0No linked articles in our index yet.