CVE-2026-42532: Path Traversal
A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
Who can trigger the issue?
An attacker needs to provide a specially crafted .eml file and have it processed through EmailSheet's extract_parts functionality. The attack requires user interaction, as indicated by the UI:R vector.
What is the security impact after successful exploitation?
Successful exploitation can cause an arbitrary file write. The supplied vector indicates integrity impact without confidentiality or availability impact.
Which release is identified as affected?
The affected version is identified as the development version at commit 38b21f78. No other versions or configuration conditions are provided.