TI-2026-82374 CVE-2026-119025 · GHSA-jgwm-4pmq-r4w4OS command injection in open via PowerShell on WindowsPriority LOW 39open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL.CVSS 4.0HIGH 7.7· Network · No auth · User interaction · EPSS 0.01446 · Published 2026-10-29 · Partial fix · 11.0.0, 2.12.0 +1 CWE-78