Arbitrary File Write Vulnerability in Hashcat by Hashcat

CVE-2026-68766

What is CVE-2026-68766?

A vulnerability in Hashcat allows attackers to exploit the command-line parsing of restore files. By manipulating these restore files, attackers can introduce malicious output-redirecting options, such as --outfile and --potfile-path. This could lead to unauthorized content being appended to arbitrary files, which in turn could enable code execution targeting shell startup files. Users are advised to update to patched versions to protect against potential exploits.

References