CVE-2026-105841
Last modified
CVE-2026-105841 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user..
Description
lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader() in src/lrz.c passes the unescaped ZMODEM/YMODEM filename to popen(), so shell metacharacters execute as the receiving user.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Uwe Ohse | lrzsz | < 0.13.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-105841?
How severe is CVE-2026-105841?
How do I fix CVE-2026-105841?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-105836QloApps through 1.7.0 contains an authorization bypass vulne…5.4
- CVE-2026-105837libmikmod before 3.3.14 contains an integer overflow vulnera…7.8
- CVE-2026-105838libmikmod before 3.3.14 contains a heap out-of-bounds read v…5.5
- CVE-2026-105839libmikmod before 3.3.14 contains an integer overflow in the …7.8
- CVE-2026-10584Proxy server in Graph Explorer before 3.0.1 falls back to HT…8.2
- CVE-2026-105840lrzsz before 0.13.0 contains a path traversal vulnerability …7.5
- CVE-2026-105842lrzsz before 0.13.0 contains a heap-based buffer overflow vu…6.4
- CVE-2026-105844Payload is a free and open source headless content managemen…9.3
- CVE-2026-105845Payload is a free and open source headless content managemen…9.8
- CVE-2026-105846Payload is a free and open source headless content managemen…6.1
- CVE-2026-105847Payload is a free and open source headless content managemen…7.1
- CVE-2026-105848Payload is a free and open source headless content managemen…6.4
Are you affected by CVE-2026-105841?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST