VULNERABILITY INTELLIGENCE

CVE-2021-4326

CVSS score7.8 HIGH

EPSS probability0.26%

CISA KEVNot currently listed

Published2023-03-01

Last modified2026-06-17

Description

A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI.