{"id":"CVE-2026-121548","title":"nnn through 5.3 OS Command Injection via togglex Plugin","summary":"Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted filenames. Attackers can place files whose names contain a double quote and shell syntax, which…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-78"],"vendor":"jarun","product":"nnn","affected":["nnn <= 5.3"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-11-03T16:45:48.239137Z"},"exploitAvailable":true,"published":"2026-11-03","updated":"2026-11-03","sourceUpdated":"2026-11-03T16:47:00.917Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-121548","references":[{"url":"https://github.com/jarun/nnn/issues/2188","label":"GitHub Issue #2188"},{"url":"https://github.com/jarun/nnn"},{"url":"https://github.com/jarun/nnn/commit/04715921aece0257fef7a8558c0783493d98efff","label":"Fix commit"},{"url":"https://github.com/jarun/nnn/blob/v5.3/plugins/togglex#L15"},{"url":"https://www.vulncheck.com/advisories/nnn-through-5.3-os-command-injection-via-togglex-plugin","label":"VulnCheck Advisory: nnn through 5.3 OS Command Injection via togglex Plugin"}],"tags":["cve.org","exploit-available"],"epss":0.01152,"epssPercentile":0.67052,"ingestedAt":"2026-11-05T20:33:06.288Z","slug":"CVE-2026-121548","body":"## Overview\n\nJarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted filenames. Attackers can place files whose names contain a double quote and shell syntax, which xargs -I splices into an sh -c script, running commands as the user invoking togglex.\n\n## Affected\n\n- `nnn <= 5.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":42.9,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[]}