CVE-2026-95168: Nvbn thefuck vulnerability

Published Oct 20, 2026

Updated

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py

Affected Software

1 affected component

nvbn thefuck=3.32

Event History

Oct 20, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:17 PM

Description

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as exploitable by a local attacker. The available information does not indicate that remote exploitation is possible.

What is the impact of successful exploitation?

A successful attacker can execute arbitrary code through the rule-import processing involving get_rules_import_paths and Rule.from_path.

CVE-2026-95168: Nvbn thefuck vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the impact of successful exploitation?