CVE-2026-41450

Name of the Vulnerable Software and Affected Versions UAC (Unix-like Artifacts Collector) versions prior to 3.3.0

Description A command injection issue exists in the command collector() function. The software substitutes command output lines directly into command strings using sed without proper escaping before they are processed by eval. This allows an attacker to execute arbitrary commands on the analyst's host system by creating malicious filenames or artifact definitions that include shell metacharacters, such as semicolons or command substitution syntax.

Recommendations Update to version 3.3.0 or later.