32°N Security Findings MSS SK 2026 0024

MSS-SK-2026-0024

eval() on plugin options enables RCE

Summary

eval() on plugin options enables RCE.

Impact

see PoC script header

Proof of concept

research/audits/signalk/exploits/0024-signalk-ecowitt-eval-on-plugin-options-enables-rce.py/

  • 0024-signalk-ecowitt-eval-on-plugin-options-enables-rce.py — single-file