Low severity3.2NVD Advisory· Published Sep 13, 2026

CVE-2026-90773

Description

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dalance/Procsreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=0.14.12

Patches

Vulnerability mechanics

References

github.com/dalance/procs/blob/v0.14.12/src/columns/command.rsnvd
github.com/dalance/procs/commit/a064cec7d59f69a636d38e247824245dcd3a9836nvd
github.com/dalance/procs/issues/950nvd
www.vulncheck.com/advisories/procs-through-0.14.12-terminal-escape-sequence-injection-via-commandnvd

News mentions

No linked articles in our index yet.

cvss	0.208
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000