Monthly
Code execution in Sapling SCM versions prior to v0.2.20260929-102736 can be triggered by cloning a maliciously crafted Git repository whose subtree URLs contain embedded control characters; simply running an otherwise read-only command such as 'sl log', 'sl blame', or 'sl annotate' against that clone is enough to execute attacker-controlled code. Exploitation is not remote or automatic: the CVSS vector (AV:L/PR:N/UI:R) requires the victim to clone an untrusted repository and then invoke one of the affected commands, so an attacker must first socially engineer the clone. At time of analysis there is no public exploit identified, CISA SSVC records Exploitation as 'none', the issue is not in CISA KEV, and no EPSS signal was provided; nonetheless the potential technical impact is total (confidentiality, integrity, and availability all High), so patched installations (v0.2.20260929-102736 and later) should be treated as the only safe configuration.
Terminal escape-sequence injection in colmux, the multi-host aggregation front-end shipped with collectl before 4.3.20.2, lets an attacker who already holds an unprivileged local account on a monitored host embed crafted ANSI/VT100 control sequences - delivered via a fake process name (argv[0]) in the host's collected process data - into the terminal of an operator running colmux and viewing that host. Because colmux renders remote data without neutralizing escape, meta, or control characters (CWE-150), the injected sequences can rewrite displayed output or invoke terminal-emulator features, giving high integrity and confidentiality impact on the operator's session (CVSS 3.1 7.7, AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N). Exploitation is constrained by stacked prerequisites: attacker foothold on a monitored node, an operator actively viewing that host in colmux, and a terminal emulator that still honors the more dangerous escape sequences, which many modern emulators disable by default; no public exploit code was identified at time of analysis and the flaw is not in CISA KEV.
OpenAI Codex CLI and Codex Desktop's PowerShell command-safety parser failed to recognize PowerShell's stop-parsing token (--%), misclassifying file-writing Git commands embedded after that token as safe and executing them without user approval. An attacker who tricks a developer into opening a crafted repository can cause Codex to silently write an attacker-controlled configuration; when Codex subsequently loads that configuration, it launches an attacker-designated MCP server and executes arbitrary code under the user's account. No public exploit has been identified at time of analysis (EPSS 0.16%, 6th percentile), and the default filesystem sandbox on macOS and Linux can limit the damage radius by preventing writes outside permitted directories.
SQL injection in syslog-ng versions before 4.12 (also fixed in Premium Edition 8.2 and Store Box 7.8) allows an attacker who controls an untrusted log source to inject SQL through log data processed by the afsql SQL destination driver, because afsql_dd_run_query omits a required sanitization call. Exploitation only affects deployments that have manually configured the SQL driver, and there is no public exploit identified at time of analysis and no CISA KEV listing. The rated impact centers on integrity of the backing database and availability of the logging pipeline (CVSS 7.1).
Local code execution in Tabby terminal emulator versions before 1.0.233 occurs when dragging and dropping files containing control characters in their paths. The terminal fails to properly escape control sequences, allowing attackers to execute arbitrary commands through crafted filenames when a user drags a malicious file into the terminal window.
KDE KCoreAddons before version 6.25 contains an improper neutralization of special elements vulnerability in the KShell::quoteArgs() function that fails to safely escape metacharacters and control characters, allowing local attackers with user interaction to inject arbitrary shell commands or terminal control sequences when user input is passed to shell execution contexts. Applications using this method to quote arguments for security-critical operations are affected; exploitation requires local access and user interaction but can achieve arbitrary code execution with user privileges.
Escape sequence injection in Microsoft Power Apps versions prior to 3.26032.10.0 allows authenticated attackers with low privileges to bypass security controls and achieve remote code execution with high confidentiality, integrity, and availability impact across security boundaries. The vulnerability requires user interaction and affects Power Apps 1710 (build 9.2.23071.136 and earlier). EPSS score of 0.08% (23rd percentile) suggests low probability of mass exploitation despite critical CVSS 9.0 rating. Vendor patch available via Microsoft Security Response Center advisory.
Mattermost's mmctl command-line administration tool fails to sanitize ANSI and OSC escape sequences embedded in user-generated post content, enabling authenticated low-privilege attackers to inject malicious terminal control codes when administrators export or query messages. Exploitation allows screen manipulation, fake prompt injection, and clipboard hijacking against administrators running mmctl commands, potentially leading to secondary code execution if administrators are tricked into running injected commands. CISA SSVC framework indicates no current exploitation, non-automatable attack requiring high complexity and user interaction, but with total technical impact potential.
String filter bypass in Inspektor Gadget Kubernetes eBPF tooling before fix. Insufficient string escaping enables filter injection. PoC and patch available.
Information disclosure in Microsoft 365 Word Copilot enables unauthenticated attackers to extract sensitive data through improper handling of escape and control sequences in network communications. The vulnerability requires user interaction to trigger and affects the Copilot AI/ML service with a CVSS score of 7.4. No patch is currently available.
Code execution in Sapling SCM versions prior to v0.2.20260929-102736 can be triggered by cloning a maliciously crafted Git repository whose subtree URLs contain embedded control characters; simply running an otherwise read-only command such as 'sl log', 'sl blame', or 'sl annotate' against that clone is enough to execute attacker-controlled code. Exploitation is not remote or automatic: the CVSS vector (AV:L/PR:N/UI:R) requires the victim to clone an untrusted repository and then invoke one of the affected commands, so an attacker must first socially engineer the clone. At time of analysis there is no public exploit identified, CISA SSVC records Exploitation as 'none', the issue is not in CISA KEV, and no EPSS signal was provided; nonetheless the potential technical impact is total (confidentiality, integrity, and availability all High), so patched installations (v0.2.20260929-102736 and later) should be treated as the only safe configuration.
Terminal escape-sequence injection in colmux, the multi-host aggregation front-end shipped with collectl before 4.3.20.2, lets an attacker who already holds an unprivileged local account on a monitored host embed crafted ANSI/VT100 control sequences - delivered via a fake process name (argv[0]) in the host's collected process data - into the terminal of an operator running colmux and viewing that host. Because colmux renders remote data without neutralizing escape, meta, or control characters (CWE-150), the injected sequences can rewrite displayed output or invoke terminal-emulator features, giving high integrity and confidentiality impact on the operator's session (CVSS 3.1 7.7, AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N). Exploitation is constrained by stacked prerequisites: attacker foothold on a monitored node, an operator actively viewing that host in colmux, and a terminal emulator that still honors the more dangerous escape sequences, which many modern emulators disable by default; no public exploit code was identified at time of analysis and the flaw is not in CISA KEV.
OpenAI Codex CLI and Codex Desktop's PowerShell command-safety parser failed to recognize PowerShell's stop-parsing token (--%), misclassifying file-writing Git commands embedded after that token as safe and executing them without user approval. An attacker who tricks a developer into opening a crafted repository can cause Codex to silently write an attacker-controlled configuration; when Codex subsequently loads that configuration, it launches an attacker-designated MCP server and executes arbitrary code under the user's account. No public exploit has been identified at time of analysis (EPSS 0.16%, 6th percentile), and the default filesystem sandbox on macOS and Linux can limit the damage radius by preventing writes outside permitted directories.
SQL injection in syslog-ng versions before 4.12 (also fixed in Premium Edition 8.2 and Store Box 7.8) allows an attacker who controls an untrusted log source to inject SQL through log data processed by the afsql SQL destination driver, because afsql_dd_run_query omits a required sanitization call. Exploitation only affects deployments that have manually configured the SQL driver, and there is no public exploit identified at time of analysis and no CISA KEV listing. The rated impact centers on integrity of the backing database and availability of the logging pipeline (CVSS 7.1).
Local code execution in Tabby terminal emulator versions before 1.0.233 occurs when dragging and dropping files containing control characters in their paths. The terminal fails to properly escape control sequences, allowing attackers to execute arbitrary commands through crafted filenames when a user drags a malicious file into the terminal window.
KDE KCoreAddons before version 6.25 contains an improper neutralization of special elements vulnerability in the KShell::quoteArgs() function that fails to safely escape metacharacters and control characters, allowing local attackers with user interaction to inject arbitrary shell commands or terminal control sequences when user input is passed to shell execution contexts. Applications using this method to quote arguments for security-critical operations are affected; exploitation requires local access and user interaction but can achieve arbitrary code execution with user privileges.
Escape sequence injection in Microsoft Power Apps versions prior to 3.26032.10.0 allows authenticated attackers with low privileges to bypass security controls and achieve remote code execution with high confidentiality, integrity, and availability impact across security boundaries. The vulnerability requires user interaction and affects Power Apps 1710 (build 9.2.23071.136 and earlier). EPSS score of 0.08% (23rd percentile) suggests low probability of mass exploitation despite critical CVSS 9.0 rating. Vendor patch available via Microsoft Security Response Center advisory.
Mattermost's mmctl command-line administration tool fails to sanitize ANSI and OSC escape sequences embedded in user-generated post content, enabling authenticated low-privilege attackers to inject malicious terminal control codes when administrators export or query messages. Exploitation allows screen manipulation, fake prompt injection, and clipboard hijacking against administrators running mmctl commands, potentially leading to secondary code execution if administrators are tricked into running injected commands. CISA SSVC framework indicates no current exploitation, non-automatable attack requiring high complexity and user interaction, but with total technical impact potential.
String filter bypass in Inspektor Gadget Kubernetes eBPF tooling before fix. Insufficient string escaping enables filter injection. PoC and patch available.
Information disclosure in Microsoft 365 Word Copilot enables unauthenticated attackers to extract sensitive data through improper handling of escape and control sequences in network communications. The vulnerability requires user interaction to trigger and affects the Copilot AI/ML service with a CVSS score of 7.4. No patch is currently available.