Vendor
The nnn file manager utility contains a command injection vulnerability in the togglex plugin, allowing attackers to execute arbitrary commands through maliciously crafted filenames.