CVE-2026-61898 | Canonical accountsservice up to 23.13.9-8ubuntu6 Language Helper Scripts SetLanguage os command injection

August 20, 2026 Yanac

A vulnerability, which was classified as very critical, was found in Canonical accountsservice up to 23.13.9-8ubuntu6. The impacted element is the function SetLanguage of the component Language Helper Scripts. Such manipulation of the argument Language leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-61898. Local access is required to approach this attack. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More