{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ajarunnnn/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:jarun:nnn:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-121548"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["nnn (\u003c= 5.3)"],"_cs_severities":["high"],"_cs_tags":["command-injection","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Jarun"],"content_html":"\u003cp\u003eThe nnn file manager (versions up to and including 5.3) contains an OS command injection vulnerability in the \u003ccode\u003eplugins/togglex\u003c/code\u003e script. The vulnerability arises because filenames containing double quotes and shell metacharacters are improperly passed to an \u003ccode\u003esh -c\u003c/code\u003e script via \u003ccode\u003exargs -I\u003c/code\u003e. This allows an attacker to achieve arbitrary code execution under the privileges of the user running the \u003ccode\u003etogglex\u003c/code\u003e plugin.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker who can control file names within a directory managed or processed by the \u003ccode\u003etogglex\u003c/code\u003e plugin can execute arbitrary shell commands with the privileges of the user invoking the utility.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to a patched version of nnn when available or remove the \u003ccode\u003eplugins/togglex\u003c/code\u003e script from the installation directory.\u003c/li\u003e\n\u003cli\u003eReview directory contents in high-risk areas for filenames containing unusual shell metacharacters (e.g., \u003ccode\u003e\u0026quot;\u003c/code\u003e, \u003ccode\u003e$\u003c/code\u003e, \u003ccode\u003e;\u003c/code\u003e, \u003ccode\u003e\u0026amp;\u003c/code\u003e, \u003ccode\u003e|\u003c/code\u003e, \u003ccode\u003e\\\u003c/code\u003e, \u003ccode\u003e`\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eRestrict user permissions to write or modify files in directories processed by file management utilities.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-03T20:01:27Z","date_published":"2026-11-03T20:01:27Z","id":"https://feed.craftedsignal.io/briefs/2026-11-nnn-command-injection/","summary":"The nnn file manager utility contains a command injection vulnerability in the togglex plugin, allowing attackers to execute arbitrary commands through maliciously crafted filenames.","title":"Jarun nnn: OS command injection via togglex plugin (CVE-2026-121548)","url":"https://feed.craftedsignal.io/briefs/2026-11-nnn-command-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:jarun:nnn:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}