8.4 High

CVE-2026-67180 Google Turbinia allows arbitrary command execution via worker tasks

Description

Google Turbinia allows arbitrary command execution via worker tasks. An attacker with privileges to submit a processing request or influence an evidence path/name obtains code execution on the worker fleet. Fixed on 2026-07-10.

Affected products and versions

Product	Affected versions	Fixed in
Turbinia 2026	earliest → < 2026-07-10	2026-07-10

Do you use Turbinia?

Track this CVE Watch Turbinia Check my SBOMs

www.cveye.io/en/cve/CVE-2026-67180

Timeline

Published August 11, 2026
Last modified August 17, 2026

References

url github.com
url github.com
url www.cve.org
url raw.githubusercontent.com

Track this CVE