CVE-2026-48120 | mawww Kakoune up to 2026.05.20 Autorestore autorestore.kak os command injection

A vulnerability, which was classified as problematic, was found in mawww Kakoune up to 2026.05.20. The impacted element is an unknown function of the file autorestore.kak of the component Autorestore. Executing a manipulation can lead to os command injection.

This vulnerability is registered as CVE-2026-48120. The attack needs to be launched locally. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More