Skip to content
OpenAdvisories
High · 8.4 CVE-2026-21882 EUVD-2026-9256GHSA-2j3p-gqw5-g59j

theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

Published Mar 2, 2026 · Updated Mar 2, 2026 · Assigned by GitHub_M

Description

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0.

Affected products

VendorProductAffectedFixed
AsfhtgkDavid theshit < 0.2.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io theshit < 0.2.0 0.2.0 GHSA-2j3p-gqw5-g59j

References