CVE-2026-31226

The TinyZero project, through commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-08-24), contains a critical command injection vulnerability (CWE-78) within its HDFS file operation utilities . The flaw exists because the _copy() function unsafely constructs and executes shell commands using os...