CVE-2026-95725: Authenticated Local Command Injection Vulnerability in the VIA Client for Linux

Published Nov 3, 2026

Updated

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:57 PM

Data Sourced

via MITRE·07:57 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this vulnerability?

Exploitation requires a local attacker with low-privileged access to an affected Linux system running the VIA client. It does not indicate that remote, unauthenticated attackers can exploit it.

What is the potential impact of successful exploitation?

A successful attacker could inject and execute arbitrary commands with elevated privileges on the affected system. This could affect confidentiality, integrity, and availability.

CVE-2026-95725: Authenticated Local Command Injection Vulnerability in the VIA Client for Linux

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact of successful exploitation?