CVE-2026-101207

Summary

This vulnerability allows a low-privileged attacker to inject OS commands, leading to potential remote code execution. It matters because it can be exploited to gain full control over the system.

Exploitability

Exploitation requires remote access and low privileges. The attacker must have the ability to send crafted input to the affected system.

Blast radius

If exploited, the attacker could gain full control over the system, potentially leading to data theft, system compromise, and further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 3.7.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.