01 Record

CVE-2026-41451

UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

HighPUBLISHEDCNA: VulnCheck

Base score8.5 CVSS v4.0CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

02 Description

UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

Published

2026-08-21 17:36Z8 HR AGO

Last updated

2026-08-21 17:36Z8 HR AGO

Reserved

2026-04-20

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

High (CVSS 8.5)

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Base

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

9832b128ae5b32f6b572241e8471ad78b66d9cb331af38612140b8773e74d505

VendorProductVersionsPlatforms

tclahruac0 to < 3.3.0—