CVE-2026-105050 - Vulnerability Details - OpenCVE

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Peazip	Peazip

No data.

No data.

References

Link	Providers
https://app.secur0.com/certificate/ys3yqg-avrwaq-5ybnwl
https://github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cf
https://github.com/peazip/PeaZip/releases/tag/11.3.0
https://github.com/peazip/PeaZip/tree/sources/peazip-sources

History

Fri, 02 Oct 2026 23:45:00 +0000

Type	Values Removed	Values Added
Title		PeaZip Command Injection via Malformed Archive Filename

Fri, 02 Oct 2026 22:45:00 +0000

Type	Values Removed	Values Added
Description		PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.
First Time appeared		Peazip Peazip peazip
Weaknesses		CWE-180
CPEs		cpe:2.3:a:peazip:peazip::::::::
Vendors & Products		Peazip Peazip peazip
References		https://app.secur0.com/certificate/ys3yqg-avrwaq-5ybnwl https://github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cf https://github.com/peazip/PeaZip/releases/tag/11.3.0 https://github.com/peazip/PeaZip/tree/sources/peazip-sources
Metrics		cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-10-02T22:37:54.551Z

Updated: 2026-10-06T17:42:13.608Z

Reserved: 2026-10-02T22:37:53.599Z

Link: CVE-2026-105050

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-10-02T23:16:58.093

Modified: 2026-10-06T18:16:43.560

Link: CVE-2026-105050

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-105050", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-10-02T22:37:53.599Z", "datePublished": "2026-10-02T22:37:54.551Z", "dateUpdated": "2026-10-06T17:42:13.608Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "PeaZip", "programFiles": ["peazip-sources/dev/list_utils.pas"], "programRoutines": [{"name": "stringdelim"}, {"name": "correctdelimiter"}], "repo": "https://github.com/peazip/PeaZip", "vendor": "PeaZip", "versions": [{"lessThan": "11.3.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because \"quotation character already used in the string\" is mishandled."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "baseScore": 7.1, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-180", "description": "CWE-180 Incorrect Behavior Order: Validate Before Canonicalize", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-02T22:37:54.551Z"}, "references": [{"tags": ["patch"], "url": "https://github.com/peazip/PeaZip/releases/tag/11.3.0"}, {"tags": ["patch"], "url": "https://github.com/peazip/PeaZip/tree/sources/peazip-sources"}, {"tags": ["third-party-advisory"], "url": "https://app.secur0.com/certificate/ys3yqg-avrwaq-5ybnwl"}, {"url": "https://github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cf"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:peazip:peazip:*:*:*:*:*:*:*:*", "versionEndExcluding": "11.3.0"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T16:59:24.486320Z", "id": "CVE-2026-105050", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T17:42:13.608Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "PeaZip", "programFiles": ["peazip-sources/dev/list_utils.pas"], "programRoutines": [{"name": "stringdelim"}, {"name": "correctdelimiter"}], "repo": "https://github.com/peazip/PeaZip", "vendor": "PeaZip", "versions": [{"lessThan": "11.3.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "cve@mitre.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because \"quotation character already used in the string\" is mishandled."}], "id": "CVE-2026-105050", "lastModified": "2026-10-06T18:16:43.560", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cve@mitre.org", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-105050", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T16:59:24.486320Z", "version": "2.0.3"}}]}, "published": "2026-10-02T23:16:58.093", "references": [{"source": "cve@mitre.org", "url": "https://app.secur0.com/certificate/ys3yqg-avrwaq-5ybnwl"}, {"source": "cve@mitre.org", "url": "https://github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cf"}, {"source": "cve@mitre.org", "url": "https://github.com/peazip/PeaZip/releases/tag/11.3.0"}, {"source": "cve@mitre.org", "url": "https://github.com/peazip/PeaZip/tree/sources/peazip-sources"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-180"}], "source": "cve@mitre.org", "type": "Secondary"}]}