UBUNTU-CVE-2026-116576

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-116576

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-116576.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-116576

Upstream

CVE-2026-116576

Published

2026-10-26T21:18:00Z

Modified

2026-10-28T20:15:58Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after processing it with sanitizeShellString() in lib/util.js. On Windows, the sanitizer removes ASCII quotes but permits Unicode quotation marks that PowerShell accepts as string delimiters, allowing crafted input to terminate the filter and place a PowerShell expression in the command executed by util.powerShell(). The expression runs with the Node.js process account's permissions and may read or change accessible files, alter application data, or disrupt the service. The package does not expose a network service itself, so remote reachability depends on a consuming application forwarding attacker-controlled input to services() or getDynamicData(). This issue is fixed in version 5.33.16.

References

Affected packages

Ubuntu:26.10 / node-systeminformation

Package

Name: node-systeminformation
Purl: pkg:deb/ubuntu/node-systeminformation?arch=source&distro=stonking

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.31.6-4

5.31.7-1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "node-systeminformation",
            "binary_version":  "5.31.7-1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-116576.json"