VULNERABILITY INTELLIGENCE
CVE-2026-73480
CVSS score5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-08-13
Last modified2026-09-24
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit. Attackers can craft malicious directory or file names containing escape sequences that are interpreted by the terminal, enabling title spoofing, clipboard manipulation, or other terminal-dependent effects.
Weakness classification
- disclosure@vulncheck.com: CWE-116