PT-2026-32063
تاريخ النشر
2026-03-31
·
تاريخ التحديث
2026-03-31
الوصف من
CVSS 3.1
7.3
عاليةالمقاييسAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Summary
Allow-always persistence did not unwrap
/usr/bin/script and similar wrappers to the actual executed target before storing trust decisions.Impact
A user approval for one wrapped command could persist trust for a wrapper binary that later executed a different underlying program.
Affected Component
src/infra/dispatch-wrapper-resolution.ts, src/infra/exec-wrapper-resolution.tsFixed Versions
- Affected:
<= 2026.3.24 - Patched:
>= 2026.3.28 - Latest stable
2026.3.28contains the fix.
Fix
Fixed by commit
83da3cfe31 (infra: unwrap script wrapper approval targets). وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾