CVE-2026-27806: Improper Neutralization of Special Elements used in an OS Command

Fleet is open source device management software. Prior to 4.81.1, the Orbit agent's FileVault disk encryption key rotation flow on collects a local user's password via a GUI dialog and interpolates it directly into a Tcl/expect script executed via exec.Command"expect", "-c", script. Because the...

Malicious code in tcl-expect (npm)

The package tcl-expect was found to contain malicious code...

MAL-2025-34597 Malicious code in tcl-expect (npm)

The package tcl-expect was found to contain malicious code...