CVE-2026-73479

Name of the Vulnerable Software and Affected Versions dua-cli (affected versions not specified)

Description The software fails to filter terminal escape sequences when printing marked file paths after the TUI (Text User Interface) interface is exited. This allows attackers to create file names containing OSC (Operating System Command) or CSI (Control Sequence Introducer) escape sequences. When these paths are printed, the terminal emulator interprets the sequences, which can lead to title spoofing, clipboard manipulation, or other escape-sequence attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.