CVE-2022-31860: Openremote

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.

Affected products

• Openremote Openremote: up to and including 1.0.4

Published 2022-09-06. Last modified 2026-06-17.