CVE-2026-22035

Greenshot is an open source Windows screenshot utility. Versions 1.3.310 and below arvulnerable to OS Command Injection through unsanitized filename processing. The FormatArguments method in ExternalCommandDestination.cs:269 uses string.Format() to insert user-controlled filenames directly into shell commands without sanitization, allowing attackers to execute arbitrary commands by crafting malicious filenames containing shell metacharacters. This issue is fixed in version 1.3.311.

• CWE-78

• https://github.com/greenshot/greenshot/commit/5dedd5c9f0a9896fa0af1d4980d875a48bf432cbPatch
• https://github.com/greenshot/greenshot/releases/tag/v1.3.311Release Notes
• https://github.com/greenshot/greenshot/security/advisories/GHSA-7hvw-q8q5-gpmjExploit, Vendor Advisory
• https://github.com/greenshot/greenshot/security/advisories/GHSA-7hvw-q8q5-gpmjExploit, Vendor Advisory

Published

Jan 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2203A flaw has been found in Tenda AC8 16.03.33.05. Affected by …8.8
• CVE-2026-22030React Router is a router for React. In @remix-run/server-run…6.5
• CVE-2026-22031@fastify/middie is the plugin that adds middleware support o…8.8
• CVE-2026-22032Directus is a real-time API and App dashboard for managing S…6.1
• CVE-2026-22033Label Studio is a multi-type data labeling and annotation to…5.4
• CVE-2026-22034Snuffleupagus is a module that raises the cost of attacks ag…9.8
• CVE-2026-22036Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 an…7.5
• CVE-2026-22037The @fastify/express plugin adds full Express compatibility …8.4
• CVE-2026-22038AutoGPT is a platform that allows users to create, deploy, a…8.1
• CVE-2026-22039Kyverno is a policy engine designed for cloud native platfor…9.9
• CVE-2026-22040NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging …5.3
• CVE-2026-22041Logging Redactor is a Python library designed to redact sens…5.3