CVE-2026-41449

Name of the Vulnerable Software and Affected Versions UAC (Unix-like Artifacts Collector) versions prior to 3.3.0

Description A command injection issue exists in the run command() function. This allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data, including usernames, process names, or filenames. Exploitation can occur through crafted evidence inputs, mounted images containing hostile filenames, or tampered artifact definitions, potentially leading to remote code execution on the analyst's host during evidence processing.

Recommendations Update to version 3.3.0 or later.