CVE-2026-119586 | SQLite up to 3.54.1 Recover Command sqlite3recover.c command injection

October 30, 2026 Yanac

A vulnerability marked as problematic has been reported in SQLite up to 3.54.1. This affects an unknown function of the file ext/recover/sqlite3recover.c of the component Recover Command. The manipulation leads to command injection.

This vulnerability is documented as CVE-2026-119586. The attack needs to be performed locally. There is not any exploit available.VulDB Recent EntriesRead More