CVE-2026-73662

A flaw was found in the FreePBX Music on Hold module. An authenticated administrator can exploit dangerous command-line options when configuring media players, such as /usr/bin/mpg123. This allows the administrator to execute arbitrary commands as the asterisk service user by writing files, opening control channels, or creating Asterisk call files.

The CVE-2026-73662 vulnerability is in the FreePBX Music on Hold module's PHP code (Music.class.php), which fails to sanitize command-line options passed to media players. The Red Hat mpg123 and asterisk packages are not affected because the vulnerable code is solely in FreePBX's web interface, which is not shipped in any Red Hat product. mpg123 is merely invoked by FreePBX and behaves as designed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.