CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...

CVE-2026-115586

A flaw was found in virtualenv. This vulnerability allows a local attacker to achieve arbitrary code execution by supplying a crafted prompt name during virtual environment creation. Due to insufficient sanitization of special shell characters in the bash activation script, the prompt value can...

Linux Distros Unpatched Vulnerability : CVE-2026-113732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote, which uses POSIX...

GHSA-5VJQ-RRRF-7H2Q virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

Impact zsh users activate an environment with the bash activate script, which puts the environment name into PS1. Since 21.13.0 the script escapes backslashes, dollar signs and backticks in that name, but only when BASHVERSION is set, so zsh gets the raw value. With the PROMPTSUBST option set, zs...

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

Impact zsh users activate an environment with the bash activate script, which puts the environment name into PS1. Since 21.13.0 the script escapes backslashes, dollar signs and backticks in that name, but only when BASHVERSION is set, so zsh gets the raw value. With the PROMPTSUBST option set, zs...

EUVD-2026-106866

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote...

DEBIAN-CVE-2026-113732

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote, which uses POSIX shlex.quote even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or...

CVE-2026-113732

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote, which uses POSIX shlex.quote even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or...

CVE-2026-113732

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote, which uses POSIX shlex.quote even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or...

PT-2026-120139

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.2 Description The FishActivator component inherits ViaTemplateActivator.quote, which utilizes the POSIX shlex.quote function. Because the fish shell interprets backslashes and single quotes differently than...

CVE-2026-77474 dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open

destructivecommandguard dcg is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substitutions are recursively rescanned after an inner scan returns unterminated, producing exponential-time work. The affected...

CVE-2026-77474 dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open

destructivecommandguard dcg is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substitutions are recursively rescanned after an inner scan returns unterminated, producing exponential-time work. The affected...

CVE-2026-77474

The destructive_command_guard (dcg) tool (prior to version 0.6.6 ) is vulnerable to an exponential-time command-substitution preprocessing flaw. The issue occurs because nested or unclosed substitutions (e.g., $( or $(() cause the scanner to recursively rescans the remaining command suffix. This ...

EUVD-2026-101291

Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...

CVE-2026-110206

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...

CVE-2026-110206

Roo-Code versions up to and including 3.54.0 are vulnerable to a command approval bypass in the parseCommandLine() function. The root cause is an interpretation conflict where attackers can use command substitution at the command position to bypass the software's allowlist. By using indirect prom...

CVE-2026-110206 Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine that allows attackers to auto-approve arbitrary shell commands by placing a command substitution in command position. Attackers using indirect prompt injection can submit commands like $echo touch /tmp/x...

CVE-2026-110205

Roo-Code versions through 3.54.0 are vulnerable to a command approval bypass in the parseCommandLine() function. The flaw occurs because the system discards command substitutions when they are placed adjacent to ＊ or ！ (glob characters). An attacker leveraging indirect prompt injection can craft ...

CVE-2026-110204

Roo Code versions through 3.54.0 are vulnerable to a command approval bypass due to how the parseCommandLine() function handles ${ command; } substitutions as parameter expansions. Attackers can utilize indirect prompt injection to embed unauthorized shell commands within allowlisted commands, su...

CVE-2026-109429 Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform

Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a single-quoted variable value that tree-sitter-bash static parsing cannot detect. Attackers can craft input such as...