Skip to content
Threat Feed

Tag

Parseusbs

1 brief RSS
high advisory

parseusbs Unsanitized LNK File Command Injection Vulnerability

parseusbs before 1.9 is vulnerable to OS command injection in parseUSBs.py due to unsanitized LNK file paths passed to os.popen(), allowing arbitrary command execution via crafted .lnk filenames.

command injection lnk parseusbs cve-2026-40029
2r 1t 1c