CVE-2026-21882

{"id": "CVE-2026-21882", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "published": "2026-03-02T20:16:26.130", "references": [{"url": "https://github.com/AsfhtgkDavid/theshit/commit/5293957b119e55212dce2c6dcbaf1d7eb794602a", "source": "security-advisories@github.com"}, {"url": "https://github.com/AsfhtgkDavid/theshit/security/advisories/GHSA-2j3p-gqw5-g59j", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-250"}, {"lang": "en", "value": "CWE-269"}, {"lang": "en", "value": "CWE-273"}]}], "descriptions": [{"lang": "en", "value": "theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0."}, {"lang": "es", "value": "theshit es una utilidad de l\u00ednea de comandos que detecta y corrige autom\u00e1ticamente errores comunes en comandos de shell. Antes de la versi\u00f3n 0.2.0, una ca\u00edda de privilegios inadecuada permite la escalada de privilegios local mediante la reejecuci\u00f3n de comandos. Este problema ha sido parcheado en la versi\u00f3n 0.2.0."}], "lastModified": "2026-04-15T15:42:24.190", "sourceIdentifier": "security-advisories@github.com"}