Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#environment variables

1 articles

Deep Dive

Cronicle Task Scheduler Privilege Escalation (CVE-2026-85076)

A non-admin Cronicle user can inject environment variables through event params and run code in another job's context. Fixed in 0.9.124.

Ostorlab Team
Nov 07, 2026