High severity7.8NVD Advisory· Published Oct 13, 2026· Updated Oct 13, 2026
CVE-2026-110233
CVE-2026-110233
Description
Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opened through open_file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
6- github.com/NSPC911/rovr/blob/888a1efecd9eb92a773bb21451244c0edcf1a3f1/src/rovr/functions/path.pynvd
- github.com/NSPC911/rovr/blob/888a1efecd9eb92a773bb21451244c0edcf1a3f1/src/rovr/functions/path.pynvd
- github.com/NSPC911/rovr/releases/tag/v0.10.3nvd
- hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/HyCwXmsjfenvd
- pypi.org/project/rovr/0.10.3/nvd
- www.vulncheck.com/advisories/rovr-through-0.10.3-os-command-injection-via-unquoted-path-to-cmd-exenvd
News mentions
0No linked articles in our index yet.