https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 06:31:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-321923 EUVD-2026-321923 https://cve.radiocsirt.org/vuln/euvd-2026-321923 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44449 <p>Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(fullPath) call throws, the method falls back to a dirname/basename split and only validates the directory prefix. The basename is concatenated directly into the smbclient -c script without validation. smbclient interprets ; as a subcommand separator and !cmd as a local-shell escape that runs cmd on the host. A path whose directory component is clean but whose basename contains &#34;; !&lt;cmd&gt;; echo &#34; achieves arbitrary command execution on the Lumiverse server. This vulnerability is fixed in 0.9.7.</p> <p>Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(fullPath) call throws, the method falls back to a dirname/basename split and only validates the directory prefix. The basename is concatenated directly into the smbclient -c script without validation. smbclient interprets ; as a subcommand separator and !cmd as a local-shell escape that runs cmd on the host. A path whose directory component is clean but whose basename contains &#34;; !&lt;cmd&gt;; echo &#34; achieves arbitrary command execution on the Lumiverse server. This vulnerability is fixed in 0.9.7.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44449