8 votes

Conquering the Moon (luarocks.org remote code execution exploit)

Tags: lua, cve, rce, luarocks

2 comments

  1. if_not_nil
    Link
    A remote code execution vulnerability found in luarocks' infrastructure, linked is the writeup of the finder of the exploit. Luarocks themselves have also commented:...

    A remote code execution vulnerability found in luarocks' infrastructure, linked is the writeup of the finder of the exploit. Luarocks themselves have also commented: https://luarocks.org/security-incident-september-2026

    3 votes
  2. Zorind
    Link
    Really neat, thanks for sharing. The whole time I was reading I was basically thinking the thing the author said at the bottom of the post, so when I read it I did laugh a little.

    Really neat, thanks for sharing.

    The whole time I was reading I was basically thinking the thing the author said at the bottom of the post, so when I read it I did laugh a little.

    Or, hear me out, maybe don’t use a programming language for simple configuration…? Food for thought :)