CVE-2026-75483

Name of the Vulnerable Software and Affected Versions powerlevel10k (affected versions not specified)

Description The software fails to neutralize control characters within the version field of a package.json file when rendering the package prompt segment. This allows an attacker to inject raw escape bytes into the version string, which results in the emission of arbitrary terminal control sequences every time the shell enters a directory containing the malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.