Skip to content
OpenAdvisories

Vendor

tclahr

4 known vulnerabilities.

Products

uac 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.8
    CVE-2026-41451

    UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

    UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parse_artifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings w…

    tclahr uac
  • High 7.8
    CVE-2026-41450

    UAC < 3.3.0 Command Injection via command_collector.sh

    UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_collector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before be…

    tclahr uac
  • High 7.8
    CVE-2026-41449

    UAC < 3.3.0 Command Injection via run_command.sh

    UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, pro…

    tclahr uac
  • High 7.8
    CVE-2026-40032

    UAC < 3.3.0-rc1 Command Injection via Placeholder Substitution

    UAC (Unix-like Artifacts Collector) before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where the _run_command() function passes constructed command strings directly to eval without proper…

    tclahr uac