CVE-2021-4406

CVE-2021-4406 is a critical command injection vulnerability affecting osnexus quantastor, allowing an authenticated attacker to execute arbitrary commands as root. By manipulating alert manager webhooks, an attacker can inject shell commands that are then executed when a test alert is triggered. This vulnerability carries a CVSS score of 7.2 (HIGH), indicating a severe impact with high confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, nor are there public Metasploit or Nuclei modules, but the vulnerability has garnered significant community discussion, suggesting awareness among security researchers.