CVE-2026-73682 | SemaphoreUI Semaphore up to 2.18.19 Git URL git_url os command injection

A vulnerability was found in SemaphoreUI Semaphore up to 2.18.19. It has been classified as problematic. This vulnerability affects unknown code of the component Git URL Handler. Performing a manipulation of the argument git_url results in os command injection.

This vulnerability is cataloged as CVE-2026-73682. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.