CVE-2026-106057 | wummel patool up to 4.0.5 Archive Filename shell_quote_nt os command injection

SecurityVulns
Yanac

A vulnerability identified as critical has been detected in wummel patool up to 4.0.5. Impacted is the function shell_quote_nt of the component Archive Filename Handler. Performing a manipulation results in os command injection.

This vulnerability is cataloged as CVE-2026-106057. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More