PT-2022-27415

CVE-2022-45145

Published

2022-12-10

Updated

2026-09-30

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CHICKEN versions 5.x before 5.3.1

Description The issue allows arbitrary OS command execution during package installation via escape characters in a .egg file. This is due to a problem in the egg-compile.scm file.

Recommendations For CHICKEN versions 5.x before 5.3.1, update to version 5.3.1 or later to resolve the issue. As a temporary workaround, consider restricting the installation of packages from untrusted sources to minimize the risk of exploitation.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers

CVE-2022-45145

ALT-PU-2024-17258

ALT-PU-2025-6092