PT-2026-79825 · Unknown · Sakura Editor
CVE-2026-59561
·
Published
2026-08-24
·
Updated
2026-08-24
CVSS v4.0
8.4
High
| Vector | AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Sakura Editor (affected versions not specified)
Description
An OS command injection flaw exists where arbitrary operating system commands can be executed on a user's PC. This occurs if a victim is directed to edit a file within a specially crafted directory and subsequently invokes the "Open Terminal" feature.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sakura Editor