CVE-2026-6791

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An issue exists in the wordexp function when expanding paths that start with a tilde (~) followed by a username. The internal parse tilde() function allocates memory for the username on the stack using the strndupa macro without performing bounds checks on the length of the user-supplied input. Providing an excessively long username can exhaust the thread's stack space, allowing an attacker to trigger a stack clash, which occurs when the stack grows into another memory region.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.