CVE-2026-123784

A flaw was found in Fluxbox. This vulnerability allows an attacker to execute arbitrary commands by convincing a user to load a specially crafted style file. When processing the style, unescaped background configuration values are passed directly to a system shell command, leading to command...