CVE-2026-21882

Summary

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0.

Affected Software

VendorProductVersion RangeStatus
AsfhtgkDavidtheshit< 0.2.0affected

Weaknesses

  • CWE-273: CWE-273: Improper Check for Dropped Privileges
  • CWE-269: CWE-269: Improper Privilege Management
  • CWE-250: CWE-250: Execution with Unnecessary Privileges

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

References