CVE-2026-110233 — rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe
Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a…
Published: 2026-10-13 · CVSS: 8.4 · CVSS 4.0
Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened through open_file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7