CVE-2026-35580 | NSA Emissary up to 8.38.x workflow_dispatch command injection

A vulnerability was found in NSA Emissary up to 8.38.x and classified as critical. Affected by this vulnerability is an unknown functionality. Executing a manipulation of the argument workflow_dispatch can lead to command injection.

This vulnerability appears as CVE-2026-35580. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.