CVE-2026-85082

Name of the Vulnerable Software and Affected Versions Root Browser Classic version 3.3.0

Description Root Browser Classic passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command. This lack of separation can allow for command injection, where an attacker could execute arbitrary commands on the system by manipulating the database path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.