GHSA-6w5f-5wgr-qjg5
Constellation allows Emergency shell access during initramfs boot phase
GHSA-6w5f-5wgr-qjg5 is a vulnerability with no CVSS score yet in github.com/edgelesssys/constellation, published March 9, 2023. No source lists public exploit code. Fixed in github.com/edgelesssys/constellation/v2 2.6.0.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.6.0github.com/edgelesssys/constellation/v2 +1 more
Description
Impact
An active attacker could let the boot fail on purpose in the initramfs, dropping the serial console into an emergency shell. This gives attackers with access to the serial console full control over the VM.
Patches
The issue has been patched in v2.6.0.
Workarounds
none
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/edgelesssys/constellation/v2Go | before 2.6.0 | 2.6.0 |
github.com/edgelesssys/constellationGo | All versions | None known |
What each source reports
GitHub AdvisoriesNo score
Constellation allows Emergency shell access during initramfs boot phase
Impact
An active attacker could let the boot fail on purpose in the initramfs, dropping the serial console into an emergency shell. This gives attackers with access to the serial console full control over the VM.
Patches
The issue has been patched in v2.6.0.
Workarounds
none
- Record
GHSA-6w5f-5wgr-qjg5- Updated
- 2026-11-02
OSVNo score
Constellation allows Emergency shell access during initramfs boot phase
Impact
An active attacker could let the boot fail on purpose in the initramfs, dropping the serial console into an emergency shell. This gives attackers with access to the serial console full control over the VM.
Patches
The issue has been patched in v2.6.0.
Workarounds
none
- Record
GHSA-6w5f-5wgr-qjg5- Updated
- 2026-11-02
OSVGO-2023-1622No score
Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation
Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation
- Record
GO-2023-1622- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.