CVE-2026-122157 | Purocean Yank Note 3.93.0 Terminal src/main/server/index.ts checkPermission os command injection (Issue 531)

November 4, 2026 Yanac

A vulnerability described as critical has been identified in Purocean Yank Note 3.93.0. Affected by this vulnerability is the function checkPermission of the file src/main/server/index.ts of the component Terminal Handler. Such manipulation leads to os command injection.

This vulnerability is documented as CVE-2026-122157. The attack can be executed remotely. Additionally, an exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More