<![CDATA[If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised.]]>If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. The latest patch will help clean up the mess.

See here: https://github.com/Chocobozzz/PeerTube/releases/tag/v8.1.8

]]>https://forum.fedi.dk/topic/7abf96f1-db19-4c77-a499-d6df5d6b0761/if-you-run-a-peertube-instance-and-have-not-patched-in-the-past-4-hours-you-are-way-behind-and-likely-have-been-compromised.RSS for NodeMon, 25 May 2026 12:56:12 GMTSat, 23 May 2026 13:23:05 GMT60<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 22:15:46 GMT]]>@jawnsy @jerry

At this time and age, an SQL injection vulnerability is a clear proof of sloppiness, unless the vulnerability is in the data access library they are using, of course.

There are so many ways to access a database that make impossible that kind of attack that there is no excuse.
It is not something weird or complex; even PHP official documentation explains clearly how to avoid them when they explain how to access a DB.

Let's hope they have learned their lesson and they change all their DB code according to best practices.

We are in 2026, for God's sake.

]]>https://forum.fedi.dk/post/https://qoto.org/users/jgg/statuses/116626197465684543https://forum.fedi.dk/post/https://qoto.org/users/jgg/statuses/116626197465684543Sat, 23 May 2026 22:15:46 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 20:05:00 GMT]]>@jerry does this affect tchncs @milan ?

]]>https://forum.fedi.dk/post/https://social.tchncs.de/users/milkytwix/statuses/116625683289171024https://forum.fedi.dk/post/https://social.tchncs.de/users/milkytwix/statuses/116625683289171024Sat, 23 May 2026 20:05:00 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 16:23:15 GMT]]>@Jerry@hear-me.social @jerry@infosec.exchange Same... and now it's time for coffee.

]]>https://forum.fedi.dk/post/https://mastodon.cthos.dev/users/cthos/statuses/116624811315718238https://forum.fedi.dk/post/https://mastodon.cthos.dev/users/cthos/statuses/116624811315718238Sat, 23 May 2026 16:23:15 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 16:01:59 GMT]]>@jerry @lety

]]>https://forum.fedi.dk/post/https://mastodon.online/users/tunafishtiger/statuses/116624727733612091https://forum.fedi.dk/post/https://mastodon.online/users/tunafishtiger/statuses/116624727733612091Sat, 23 May 2026 16:01:59 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 15:32:09 GMT]]>@jerry I wonder if someone can design a SQL injection to update instances, for the users who are having trouble contacting their instance maintainers

]]>https://forum.fedi.dk/post/https://mastodon.mit.edu/users/almonds/statuses/116624610392620887https://forum.fedi.dk/post/https://mastodon.mit.edu/users/almonds/statuses/116624610392620887Sat, 23 May 2026 15:32:09 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 14:17:25 GMT]]>@jerry If you've been compromised, will a patch really clean things up? I thought the general wisdom was that you should nuke the site from orbit and perform a clean OS install + restore from backups?

]]>https://forum.fedi.dk/post/https://ohai.social/users/aspragg/statuses/116624316527496151https://forum.fedi.dk/post/https://ohai.social/users/aspragg/statuses/116624316527496151Sat, 23 May 2026 14:17:25 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 14:15:03 GMT]]>@jerry Impressive release with detections and mitigations in the notes. The team did well responding to it.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/jawnsy/statuses/116624307198800861https://forum.fedi.dk/post/https://mastodon.social/users/jawnsy/statuses/116624307198800861Sat, 23 May 2026 14:15:03 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 13:55:27 GMT]]>@jerry@infosec.exchange It was quite a thing to wake up to this morning. I upgraded my instance before I even had my coffee.

]]>https://forum.fedi.dk/post/https://hear-me.social/users/Jerry/statuses/116624230136516043https://forum.fedi.dk/post/https://hear-me.social/users/Jerry/statuses/116624230136516043Sat, 23 May 2026 13:55:27 GMT<![CDATA[Reply to If you run a peertube instance and have not patched in the past 4 hours, you are way behind and likely have been compromised. on Sat, 23 May 2026 13:34:15 GMT]]>Also, hat tip to the peertube developers for being so responsive.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/jerry/statuses/116624146820380670https://forum.fedi.dk/post/https://infosec.exchange/users/jerry/statuses/116624146820380670Sat, 23 May 2026 13:34:15 GMT