CVE-2026-117511 | desmondmorris node-tesseract up to 0.2.7 Command Builder lib/tesseract.js process image os command injection (Issue 72)

October 27, 2026 Yanac

A vulnerability was found in desmondmorris node-tesseract up to 0.2.7. It has been declared as critical. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os command injection.

This vulnerability is documented as CVE-2026-117511. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More