Monthly
OpenAI Codex CLI and Codex Desktop's PowerShell command-safety parser failed to recognize PowerShell's stop-parsing token (--%), misclassifying file-writing Git commands embedded after that token as safe and executing them without user approval. An attacker who tricks a developer into opening a crafted repository can cause Codex to silently write an attacker-controlled configuration; when Codex subsequently loads that configuration, it launches an attacker-designated MCP server and executes arbitrary code under the user's account. No public exploit has been identified at time of analysis (EPSS 0.16%, 6th percentile), and the default filesystem sandbox on macOS and Linux can limit the damage radius by preventing writes outside permitted directories.
SQL injection in syslog-ng versions before 4.12 (also fixed in Premium Edition 8.2 and Store Box 7.8) allows an attacker who controls an untrusted log source to inject SQL through log data processed by the afsql SQL destination driver, because afsql_dd_run_query omits a required sanitization call. Exploitation only affects deployments that have manually configured the SQL driver, and there is no public exploit identified at time of analysis and no CISA KEV listing. The rated impact centers on integrity of the backing database and availability of the logging pipeline (CVSS 7.1).
Local code execution in Tabby terminal emulator versions before 1.0.233 occurs when dragging and dropping files containing control characters in their paths. The terminal fails to properly escape control sequences, allowing attackers to execute arbitrary commands through crafted filenames when a user drags a malicious file into the terminal window.
Escape sequence injection in Microsoft Power Apps versions prior to 3.26032.10.0 allows authenticated attackers with low privileges to bypass security controls and achieve remote code execution with high confidentiality, integrity, and availability impact across security boundaries. The vulnerability requires user interaction and affects Power Apps 1710 (build 9.2.23071.136 and earlier). EPSS score of 0.08% (23rd percentile) suggests low probability of mass exploitation despite critical CVSS 9.0 rating. Vendor patch available via Microsoft Security Response Center advisory.
Mattermost's mmctl command-line administration tool fails to sanitize ANSI and OSC escape sequences embedded in user-generated post content, enabling authenticated low-privilege attackers to inject malicious terminal control codes when administrators export or query messages. Exploitation allows screen manipulation, fake prompt injection, and clipboard hijacking against administrators running mmctl commands, potentially leading to secondary code execution if administrators are tricked into running injected commands. CISA SSVC framework indicates no current exploitation, non-automatable attack requiring high complexity and user interaction, but with total technical impact potential.
String filter bypass in Inspektor Gadget Kubernetes eBPF tooling before fix. Insufficient string escaping enables filter injection. PoC and patch available.
Information disclosure in Microsoft 365 Word Copilot enables unauthenticated attackers to extract sensitive data through improper handling of escape and control sequences in network communications. The vulnerability requires user interaction to trigger and affects the Copilot AI/ML service with a CVSS score of 7.4. No patch is currently available.
Improper neutralization of terminal control/escape sequences in ack (App::Ack), the Perl-based grep-like source-code search tool by Andy Lester, is fixed in v3.10.0 and affects all prior releases (App::Ack 0 through ≤3.10.0). When ack prints matching lines from attacker-controlled files, unsanitized control/meta sequences are passed through to the terminal, which per the CVSS vector (A:H) can disrupt or hang the terminal session and is separately tagged as an information-disclosure risk. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Terminal escape sequence injection in procs (the Rust-based `ps` replacement by dalance) through version 0.14.12 enables a local attacker to embed ANSI, CSI, or OSC control sequences in process argv that are rendered unfiltered into other users' terminals when they run procs. The Command column in `src/columns/command.rs` only stripped literal newlines and tabs, leaving ESC bytes and derived sequences intact; a victim running procs on the same host will have those sequences interpreted by their terminal emulator, enabling clipboard overwrite via OSC 52, screen manipulation via CSI, or hyperlink spoofing. No public exploit exists beyond the fix-commit unit test, and the CVSS 4.0 score of 2.4 (Low) accurately reflects the narrow, local-only, limited-integrity impact.
Terminal escape sequence injection in ash-project/usage_rules (versions 0.1.18 through 1.2.7) allows a malicious Hex package publisher to forge what developers see when running mix usage_rules.search_docs. The Mix task queries search.hexdocs.pm and renders publisher-controlled fields - title, package name, type, doc reference, and highlighted snippets - verbatim to the terminal with no control-character sanitization, only adding ANSI highlighting rather than stripping injected sequences. A package author who embeds ANSI cursor-movement, line-erase, carriage-return, or OSC 52 clipboard-write sequences in their documentation can cause a developer's terminal to display a forged hexdocs URL, conceal output, or silently write an attacker-controlled command to the clipboard; no public exploit has been identified at time of analysis.
OpenAI Codex CLI and Codex Desktop's PowerShell command-safety parser failed to recognize PowerShell's stop-parsing token (--%), misclassifying file-writing Git commands embedded after that token as safe and executing them without user approval. An attacker who tricks a developer into opening a crafted repository can cause Codex to silently write an attacker-controlled configuration; when Codex subsequently loads that configuration, it launches an attacker-designated MCP server and executes arbitrary code under the user's account. No public exploit has been identified at time of analysis (EPSS 0.16%, 6th percentile), and the default filesystem sandbox on macOS and Linux can limit the damage radius by preventing writes outside permitted directories.
SQL injection in syslog-ng versions before 4.12 (also fixed in Premium Edition 8.2 and Store Box 7.8) allows an attacker who controls an untrusted log source to inject SQL through log data processed by the afsql SQL destination driver, because afsql_dd_run_query omits a required sanitization call. Exploitation only affects deployments that have manually configured the SQL driver, and there is no public exploit identified at time of analysis and no CISA KEV listing. The rated impact centers on integrity of the backing database and availability of the logging pipeline (CVSS 7.1).
Local code execution in Tabby terminal emulator versions before 1.0.233 occurs when dragging and dropping files containing control characters in their paths. The terminal fails to properly escape control sequences, allowing attackers to execute arbitrary commands through crafted filenames when a user drags a malicious file into the terminal window.
Escape sequence injection in Microsoft Power Apps versions prior to 3.26032.10.0 allows authenticated attackers with low privileges to bypass security controls and achieve remote code execution with high confidentiality, integrity, and availability impact across security boundaries. The vulnerability requires user interaction and affects Power Apps 1710 (build 9.2.23071.136 and earlier). EPSS score of 0.08% (23rd percentile) suggests low probability of mass exploitation despite critical CVSS 9.0 rating. Vendor patch available via Microsoft Security Response Center advisory.
Mattermost's mmctl command-line administration tool fails to sanitize ANSI and OSC escape sequences embedded in user-generated post content, enabling authenticated low-privilege attackers to inject malicious terminal control codes when administrators export or query messages. Exploitation allows screen manipulation, fake prompt injection, and clipboard hijacking against administrators running mmctl commands, potentially leading to secondary code execution if administrators are tricked into running injected commands. CISA SSVC framework indicates no current exploitation, non-automatable attack requiring high complexity and user interaction, but with total technical impact potential.
String filter bypass in Inspektor Gadget Kubernetes eBPF tooling before fix. Insufficient string escaping enables filter injection. PoC and patch available.
Information disclosure in Microsoft 365 Word Copilot enables unauthenticated attackers to extract sensitive data through improper handling of escape and control sequences in network communications. The vulnerability requires user interaction to trigger and affects the Copilot AI/ML service with a CVSS score of 7.4. No patch is currently available.
Improper neutralization of terminal control/escape sequences in ack (App::Ack), the Perl-based grep-like source-code search tool by Andy Lester, is fixed in v3.10.0 and affects all prior releases (App::Ack 0 through ≤3.10.0). When ack prints matching lines from attacker-controlled files, unsanitized control/meta sequences are passed through to the terminal, which per the CVSS vector (A:H) can disrupt or hang the terminal session and is separately tagged as an information-disclosure risk. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Terminal escape sequence injection in procs (the Rust-based `ps` replacement by dalance) through version 0.14.12 enables a local attacker to embed ANSI, CSI, or OSC control sequences in process argv that are rendered unfiltered into other users' terminals when they run procs. The Command column in `src/columns/command.rs` only stripped literal newlines and tabs, leaving ESC bytes and derived sequences intact; a victim running procs on the same host will have those sequences interpreted by their terminal emulator, enabling clipboard overwrite via OSC 52, screen manipulation via CSI, or hyperlink spoofing. No public exploit exists beyond the fix-commit unit test, and the CVSS 4.0 score of 2.4 (Low) accurately reflects the narrow, local-only, limited-integrity impact.
Terminal escape sequence injection in ash-project/usage_rules (versions 0.1.18 through 1.2.7) allows a malicious Hex package publisher to forge what developers see when running mix usage_rules.search_docs. The Mix task queries search.hexdocs.pm and renders publisher-controlled fields - title, package name, type, doc reference, and highlighted snippets - verbatim to the terminal with no control-character sanitization, only adding ANSI highlighting rather than stripping injected sequences. A package author who embeds ANSI cursor-movement, line-erase, carriage-return, or OSC 52 clipboard-write sequences in their documentation can cause a developer's terminal to display a forged hexdocs URL, conceal output, or silently write an attacker-controlled command to the clipboard; no public exploit has been identified at time of analysis.