Read the docs
TI-2026-67381 Aliases CVE-2026-105050GHSA-377g-778f-272q

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command…

Priority LOW 34CWE-180Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00515 44th percentileScored 2026-11-07
Fix Fixed PeaZip (PeaZip): 11.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PeaZipPeaZipbefore 11.3.011.3.0Patch availableCNA
  • PeaZip VendorPeaZip Affected before 11.3.0 Fixed in 11.3.0 Patch available CNA

Remediation

  • Fix · CNA PeaZip (PeaZip) Fixed in 11.3.0

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-03 Threatist record created from CVE-2026-105050
  2. 2026-10-03 Alias added: GHSA-377g-778f-272q
  3. 2026-10-04 Priority changed: MEDIUM → LOW
  4. 2026-10-06 Affected versions changed · Red Hat
  5. 2026-10-06 CVSS score added · Red Hat
  6. 2026-10-06 CISA SSVC decision points changed

References

Patch 2

Advisory 1

Other 1

  • TI-2025-24020 In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability. CVSS 3.1HIGH 7.8
  • TI-2026-74741 Path traversal in PeaZip archive preview runs arbitrary programs CVSS 4.0HIGH 8.4
  • TI-2026-65418 Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive CVSS 4.0HIGH 8.4
  • TI-2023-06296 PeaZip Library dragdropfilesdll.dll uncontrolled search path CVSS 3.1HIGH 7.8
  • TI-2026-74758 PeaZip runs programs from crafted archive entries without a prompt CVSS 4.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences