Read the docs
TI-2026-84353 Aliases CVE-2026-121547GHSA-69c2-wcm2-5698

Terminal escape sequence injection in Canop dysk via mount metadata

Priority LOW 6CWE-150Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Active
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Canop dysk before 3.8.2 does not sanitize mount metadata before rendering it in table and CSV output, which allows terminal escape sequence injection (CWE-150). A local user with low privileges can create FUSE mounts whose mount-point names or fsname contain ESC or OSC sequences. When another user runs dysk, these sequences can spoof or hide output and change the window title.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

Description from the CNA

Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control sequences by crafting mount metadata rendered unsanitized in table and CSV output. Attackers can create FUSE mounts with ESC/OSC sequences in mount-point names or fsname, causing spoofed or hidden output and window-title changes when another user runs dysk.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00145 3rd percentileScored 2026-11-07
Fix Fixed dysk (Canop): 3.8.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Canopdyskbefore 3.8.23.8.2Patch availableCNA
  • dysk VendorCanop Affected before 3.8.2 Fixed in 3.8.2 Patch available CNA

Remediation

Upgrade Canop dysk to version 3.8.2, which fixes this issue.

Written with Claude Haiku 5.5 from the sources below · 2026-11-03

  • Fix · CNA dysk (Canop) Fixed in 3.8.2

Timeline

  1. 2026-11-03 Threatist record created from CVE-2026-121547
  2. 2026-11-03 CISA SSVC decision points changed
  3. 2026-11-03 Alias added: GHSA-69c2-wcm2-5698

References

Patch 2

Other 3

  • TI-2026-51072 broot Terminal Escape Sequence Injection via Unsanitized File and Directory Names in the Tree View CVSS 4.0LOW 2.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences