CVE-2024-51358: Linuxserver Heimdall Application Dashboard

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application.

Affected products

Published 2024-11-05. Last modified 2026-06-17.