CVE-2026-16022 | oblique-bit cli up to 15.4.1 Project Creation execSync project-name os command injection

August 5, 2026 Yanac

A vulnerability marked as problematic has been reported in oblique-bit cli up to 15.4.1. Affected is the function execSync of the component Project Creation. Performing a manipulation of the argument project-name results in os command injection.

This vulnerability is reported as CVE-2026-16022. The attack requires a local approach. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More