CVE-2026-90773
Last modified
CVE-2026-90773 is a low-severity vulnerability rated 3.2/10 on the CVSS scale. procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| dalance | procs | <= 0.14.12 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-90773?
How severe is CVE-2026-90773?
How do I fix CVE-2026-90773?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-90768CAPEv2 through commit 471ee4b fails to validate task ownersh…8.1
- CVE-2026-90769Open Notebook before 1.11.0 fails to validate the URL parame…7.7
- CVE-2026-9077IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote…8.5
- CVE-2026-90770Spug through 3.4.0 contains a remote code execution vulnerab…8.8
- CVE-2026-90771joi before versions 17.13.8 and 18.2.9 contains a prototype …3.7
- CVE-2026-90772Amundsen frontend through 4.3.0 renders table, dashboard, an…7.6
- CVE-2026-90774rustypaste before 0.18.1 validates the destination path befo…7.5
- CVE-2026-90775PostGIS address_standardizer through 3.7.0 fails to validate…6.5
- CVE-2026-90776Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic…7.5
- CVE-2026-90777ESPnet before 202609 deserializes pretrained model checkpoin…8.8
- CVE-2026-90778SIPp through 3.7.7 contains a buffer overflow vulnerability …7.5
- CVE-2026-90779SIPp through 3.7.7 contains a stack buffer overflow vulnerab…7.5
Are you affected by CVE-2026-90773?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST