cve.bz

CVE-2026-21882

8.4 highEPSS 0.2%

High (8.4). EPSS 0.2% chance of exploitation in the next 30 days. Fixed in theshit 0.2.0.

theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0.

Severity

CVSS 3.1

8.4 high
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWEs
CWE-250, CWE-269, CWE-273
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-2j3p-gqw5-g59jcrates.iotheshit<0.2.00.2.0

References

Check your stackJSON