32°N Security Findings MSS SK 2026 0019

MSS-SK-2026-0019

RCE via Node-RED flow deployment

Summary

RCE via Node-RED flow deployment. CVE: CVE-2026-33950

Impact

see PoC script header

Proof of concept

research/audits/signalk/exploits/0019-signalk-node-red-rce-via-node-red-flow-deployment.py/

  • 0019-signalk-node-red-rce-via-node-red-flow-deployment.py — single-file