High severityNVD Advisory· Published Oct 10, 2026

CVE-2026-101947

Description

ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

CellHubs/ExifToolllm-create
Range: =5.0.1-gms

Patches

Vulnerability mechanics

References

fluidattacks.com/advisories/saturnnvd
play.google.com/store/apps/detailsnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000