Low severity2.2NVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026

CVE-2026-121547

Description

Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control sequences by crafting mount metadata rendered unsanitized in table and CSV output. Attackers can create FUSE mounts with ESC/OSC sequences in mount-point names or fsname, causing spoofed or hidden output and window-title changes when another user runs dysk.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Canop/dyskllm-create
Range: <3.8.2

Patches

Vulnerability mechanics

References

github.com/Canop/dysk/blob/v3.8.1/cli/src/table.rsnvd
github.com/Canop/dysk/commit/726f4f554d7c1ede21363c29b593ab130ca28d86nvd
github.com/Canop/dysk/issues/125nvd
github.com/Canop/dysk/pull/126nvd
www.vulncheck.com/advisories/dysk-before-3.8.2-terminal-escape-sequence-injection-via-mount-metadatanvd

News mentions

No linked articles in our index yet.

cvss	0.143
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000