CVE-2026-103431

Summary

The flaw in colmux in collectl before 4.3.20.2 allows a local user to inject escape sequences into the terminal of an operator, potentially leading to unauthorized control of the terminal session.

Exploitability

Exploitation requires local access to the monitored host and a crafted process name, making it moderately difficult.

Blast radius

If exploited, the impact is limited to the terminal session of the operator, potentially allowing for unauthorized terminal control.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to collectl 4.3.20.2 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.