CVE-2026-24516 | DigitalOcean Droplet Agent up to 1.3.2 Metadata Service Endpoint actioner.go command injection

A vulnerability marked as critical has been reported in DigitalOcean Droplet Agent up to 1.3.2. The affected element is an unknown function of the file internal/troubleshooting/actioner/actioner.go of the component Metadata Service Endpoint. Performing a manipulation results in command injection.

This vulnerability is known as CVE-2026-24516. Remote exploitation of the attack is possible. No exploit is available.