Skip to content
OpenAdvisories

Product · MinaSaad1

pbi-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-108744

    pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync

    pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path contain…

    MinaSaad1 pbi-cli