CVE-2020-19907

CVE-2020-19907 is a high-severity command injection vulnerability affecting Caldera versions 2.3.1 and earlier, specifically within its sandcat plugin. Authenticated attackers can exploit this flaw to execute arbitrary commands or services on the compromised system. With a CVSS score of 8.8, it presents a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, its high EPSS and FAUCET Risk Score indicate a notable potential for future exploitation.