CVE-2023-42658: Chef Inspec

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.

Affected products

• Chef Inspec: before 4.56.58 (fixed in 4.56.58); from 5.0.0, before 5.22.29 (fixed in 5.22.29)

Published 2023-10-31. Last modified 2026-06-17.