Dashboard / CVE-2026-121547

CVE-2026-121547

LOW
INFO Priority: 0.00 BB Relevance: 17/100
Published: 2026-11-03 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: Active
S: X
AT: Present
VC: None
VI: Low
VA: None

Description

Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control sequences by crafting mount metadata rendered unsanitized in table and CSV output. Attackers can create FUSE mounts with ESC/OSC sequences in mount-point names or fsname, causing spoofed or hidden output and window-title changes when another user runs dysk.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Canop dysk 0 < 3.8.2
Canop dysk 0 < 3.8.2

References & Advisories (6)

https://github.com/Canop/dysk/pull/126
technical-description patch issue-tracking

Bug Bounty Relevance

17 / 100
✓ Low complexity

CVSS Score

1.0 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.14%
Raw Score 0.001450
Percentile 3.8%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00145
2026-11-13
0.00145
2026-11-12
0.00145
2026-11-10
0.00145
2026-11-09
0.00145
2026-11-08
0.00145
2026-11-07
0.00145
2026-11-06
0.00145
2026-11-05
0.00145
2026-11-04
0.00145

Intelligence Sources

mitre ref →
nvd ref →

External Links