Security update: a flaw affects osTicket Awesome releases since 2019. A free patch is available for every installation, no subscription needed. Read the notice →
Notifications
Clear all
6 Forums 837 Topics 3,294 Posts 3 Online 3,062 Members

In Progress [Sticky] Security notice: upload flaw in osTicket Awesome (1.12-Awesome-102 to 1.18.4-Awesome-102)

1 Posts
1 Users
0 Reactions
52 Views
Posts: 1190
Admin
Topic starter
(@stevland)
Member
Joined: 10 years ago

We’ve confirmed a security flaw in osTicket Awesome’s own code that lets an attacker upload and run code on your server without logging in. It affects every release from 1.12-Awesome-102 (May 2019) through 1.18.4-Awesome-102.

A free patch is available for everyone, current or lapsed, with no login needed. Everything you need is here, and we’ll keep it updated: https://osawesome.com/documentation/security-patch-2026-11/

Questions? Ask below and we’ll answer here.


Share: