CVE-2026-107802: SumatraPDF — Windows command-line argument injection in AI selection-translate
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in quoted Windows command lines using incomplete quote-only escaping. The affected BuildGrokTranslateCmdLineTemp(), BuildClaudeTranslateCmdLineTemp(), and BuildCodexTranslateCmdLineTemp() functions can allow attacker-controlled text to inject model, working-directory, approval, or sandbox-bypass flags when the corresponding agentic CLI backend is installed and used. No broader impact is claimed beyond the advisory-supported conditions. No fixed version is available as of this review.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Exposure is limited to users of SumatraPDF 3.6.1 or earlier who use the AI selection-translate feature with a corresponding agentic CLI backend installed. The advisory does not claim broader impact outside those conditions.
What must an attacker control to exploit it?
The attacker needs to cause text selected or pasted for translation to contain crafted command-line content. That text is embedded into quoted Windows command lines with incomplete escaping.
What could injected arguments change?
Injected arguments may alter model selection, working directory, approval behavior, or sandbox-related settings for the invoked agentic CLI backend. The described impact is limited to those advisory-supported conditions.
Is a fixed release available?
No fixed version was available as of the review.