Description

A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of the file class/database.py of the component Database Backup Handler. Such manipulation of the argument Password leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "8.4",
  "pubDate": "2026-09-28T07:17:20.197Z",
  "pubdate": "2026-09-28T07:17:20.197Z",
  "executiveSummary": "A critical OS command injection vulnerability exists in aaPanel BaoTa versions up to 11.8.0, specifically within the Database Backup Handler component.\nThe vulnerability originates from the improper sanitization of the 'Password' argument handled by the InputSql function located in 'class/database.py'.\nThis flaw allows remote, unauthenticated attackers to execute arbitrary system commands with the privileges of the underlying web server process.\nGiven the nature of the application as a server management panel, successful exploitation grants the attacker full control over the host system, facilitating data exfiltration, service disruption, or further lateral movement.\nThe vulnerability is currently public and weaponized exploits are available; however, the vendor has remained unresponsive to disclosure attempts, leaving affected deployments at high risk of compromise.",
  "technicalDetails": "The vulnerability is classified as an OS Command Injection, residing within the 'InputSql' function of 'class/database.py'. The flaw is rooted in insufficient input validation and insecure handling of user-supplied data passed to system-level calls.\nIn the affected versions of aaPanel BaoTa, the 'Password' argument is processed by the database backup module without adequate escaping or sanitization before being concatenated into a command string executed by the operating system shell.\nThe attack flow begins with a remote attacker crafting a malicious payload injected into the 'Password' parameter during a database-related request. Because the 'InputSql' function fails to enforce a whitelist or sanitize shell-sensitive characters (e.g., ';', '&', '|', '`', '$()'), the input is interpreted by the shell as a command sequence rather than a literal string.\nOnce the attacker submits the specially crafted request to the vulnerable endpoint, the underlying Python environment executes the concatenated command line with the effective permissions of the web server user. This effectively bridges the gap between web input and system execution.\nSuccessful exploitation allows for the execution of arbitrary commands, ranging from system reconnaissance, such as environment variable extraction and user listing, to more destructive actions like modifying configuration files, deploying persistent backdoors, or exfiltrating sensitive database backups stored on the filesystem.\nThe component is network-exposed as part of the management interface, making it accessible to any attacker capable of reaching the control panel. As the vulnerability resides in the core management logic, the exploit does not require prior authentication, significantly lowering the barrier to entry for remote attackers.\nThis vulnerability highlights a critical breakdown in input handling within the Database Backup Handler, where the application fails to treat user-provided configuration parameters as untrusted data, resulting in a complete bypass of intended access controls and system security boundaries."
}