Product

Vite (<= 6.4.3, 7.0.0-7.3.6, 8.0.0-8.1.5, 8.2.0-8.2.3, 8.3.0-8.3.2)

1 brief RSS

launch-editor: Windows existence check bypass leading to command injection (CVE-2026-112942)

An existence check bypass in launch-editor on Windows allows attackers to execute arbitrary commands by supplying crafted file paths ending in ..:line:column.

launch-editor +2 vulnerability command-injection development-tools

1t 1c 7h ago