EUVD-2026-87939
GHSA-wm7h-qp5m-qqh7
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessPlant malicious version field in package manifest
-
DeliveryVictim enters repo directory
-
Exploitspaceship-prompt renders field unsanitized
-
ExecutionANSI/OSC escapes execute in terminal
-
ImpactWindow title rewritten / output spoofed
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Escape character neutralization
|
| Exploitation Conditions | Requires the victim to be running spaceship-prompt (through 4.22.5) as their zsh prompt with the 'package' section enabled, and to navigate into a directory whose project manifest (e.g., package.json) version field has been crafted by the attacker to contain ANSI/OSC control characters. Exploitation is limited by: local attack vector (attacker must get the malicious manifest onto the victim's filesystem, e.g., via a cloned repo or dependency), required passive user interaction (entering the directory), and a terminal emulator that honors the injected escape/OSC sequences. Impact is confined to terminal display spoofing - no code execution, privilege gain, or data disclosure. |
| Impact | Genuinely low real-world risk. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:N/UI:P, base 4.8) is consistent with the description: exploitation is LOCAL and requires the victim to enter (cd into) a directory containing an attacker-controlled package manifest, so it is not remotely triggerable. Impact is bounded to integrity-of-display only (VC:N/VI:L/VA:N) - terminal-output spoofing, not code execution or data theft. No EPSS score, no CISA KEV listing, and no public exploit code are present in the input, so exploitation status is 'no public exploit identified at time of analysis'. There is no signal conflict on severity - vendor CVSS and description agree. The one metadata conflict worth flagging: the sole tag is 'Information Disclosure', which contradicts the vendor's own VC:N (no confidentiality impact); this is a terminal-injection/output-manipulation (integrity) issue, not information disclosure. Bottom line: a low-severity, high-plausibility-but-low-consequence flaw that does not warrant emergency prioritization. |
| Exploit ScenarioDerived | An attacker publishes or contributes a repository (e.g., an npm/composer/cargo package) whose manifest version field contains embedded ANSI/OSC escape sequences. A developer using spaceship-prompt clones or pulls the repo and cd's into it; the prompt renders the version field unsanitized, letting the attacker rewrite the terminal window title or overlay spoofed text to mislead the victim (e.g., disguising a command or masking output). No public exploit code is referenced, but the mechanism is trivially reproducible. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 27, 2026
Terminal escape sequence injection in spaceship-prompt through 4.22.5 allows unauthenticated local attackers to spoof terminal output and manipulate window titles by embedding ANSI/OSC sequences in project manifest version fields when a victim enters a crafted directory. Exploitation requires the victim to have the 'package' section enabled and to navigate into the malicious directory; impact is limited to low integrity of the terminal display with no code execution or data disclosure. No public exploit or active exploitation is known at time of analysis, and the risk is considered low.
RemediationAI
No vendor-released patch is identified from the available information at time of analysis. As a workaround, disable the 'package' section in your spaceship-prompt configuration if it is not essential, which prevents the vulnerable code from rendering manifest version fields. Additionally, avoid entering directories containing untrusted project manifests. If the 'package' section is required, consider using a terminal emulator that does not interpret ANSI/OSC escape sequences from prompt output, though this may degrade visual formatting. Monitor the GitHub issue and the VulnCheck advisory for patch availability. Be aware that disabling the section reduces prompt functionality.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
spaceship-prompt is a popular zsh prompt framework that dynamically displays information like project package versions. The 'package' section reads version fields from manifests such as package.json and renders them without sanitizing control characters, as per CWE-150 (Improper Neutralization of Escape, Meta, or Control Sequences). This allows ANSI/OSC escape sequences to be injected, which can rewrite terminal window titles, spoof displayed text, or otherwise manipulate terminal output. The vulnerable code is in lib/section.zsh lines 100-102 and sections/package.zsh line 41. The attack is local: an attacker must place a malicious manifest on the victim's filesystem (e.g., via a cloned repository), and the victim must enter that directory with the 'package' section enabled. The terminal emulator must also honor the escape sequences. Impact is confined to terminal display integrity, with no code execution, privilege gain, or data disclosure.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Local because attacker-controlled manifest must be on disk (AV:L); victim must cd into the directory (UI:R); no auth needed (PR:N); only low integrity impact from display spoofing (I:L), no C/A.
Primary rating from Vendor (vulncheck).
CVSS VectorVendor: vulncheck
DescriptionCVE.org
spaceship-prompt through 4.22.5 fails to sanitize control characters from project manifest version fields before rendering them in the zsh prompt. Attackers can embed ANSI/OSC escape sequences in version fields of package manifests to manipulate terminal output, rewrite window titles, or spoof displayed text when victims enter the directory.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
Exploit-DB