Bug 2545422 (CVE-2026-105050) - CVE-2026-105050 peazip: peazip: Arbitrary command execution via crafted archive filename
Summary: CVE-2026-105050 peazip: peazip: Arbitrary command execution via crafted archi...
Keywords:
Status: NEW
Alias: CVE-2026-105050
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2546314
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-02 22:52 UTC by OSIDB Bzimport
Modified: 2026-10-06 08:02 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-02 22:52:26 UTC 
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.
Note You need to log in before you can comment on or make changes to this bug.