CVE-2026-54525 | shd101wyy Vscode Markdown Preview Enhanced up to 0.8.27 Preview Link child_process.exec os command injection

October 14, 2026 Yanac

A vulnerability has been found in shd101wyy Vscode Markdown Preview Enhanced up to 0.8.27 and classified as critical. This issue affects the function child_process.exec of the component Preview Link Handler. This manipulation causes os command injection.

This vulnerability is registered as CVE-2026-54525. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More