lrzsz: lrzsz: Arbitrary command execution via crafted file names in pipe mode

A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...

Amazon Linux 2 : lrzsz (ALAS-2026-4031)

The version of lrzsz installed on the remote host is prior to 0.12.20-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4031 advisory. lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote sende...

Important: lrzsz

Issue Overview: lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped...

AlmaLinux 9.6 [TuxCare] Security Update: lrzsz Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792503867)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792503867 advisory. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious...

Rocky Linux 9.6 [TuxCare] Security Update: lrzsz Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792503867)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792503867 advisory. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious...

SUSE CVE-2026-105840

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

CVE-2026-105841

A flaw was found in lrzsz. When operating in pipe mode, the lrz receive utility does not properly sanitize file names received during file transfers before passing them to the system shell. A remote attacker can exploit this flaw by sending a specially crafted file name, leading to arbitrary...

DEBIAN-CVE-2026-105840

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

DEBIAN-CVE-2026-105841

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

CVE-2026-105840

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

CVE-2026-105841: Improper Neutralization of Special Elements used in an OS Command

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...