CVE-2026-101032Published
navi through 2.24.0 OS Command Injection via Cheatsheet Variables
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-101032 · Microsoft / collected KEV context
cve-program · CVE-2026-101032
- https://github.com/denisidoro/navi/issues/1037
- https://github.com/denisidoro/navi/blob/5515367dc8a2a561d2d82b8352f729b1da4120d3/src/commands/core/actor.rs#L159-L193
- https://github.com/denisidoro/navi/blob/5515367dc8a2a561d2d82b8352f729b1da4120d3/src/common/shell.rs#L39-L50
- https://github.com/denisidoro/navi
- https://www.vulncheck.com/advisories/navi-through-2.24.0-os-command-injection-via-cheatsheet-variables
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.