Command Injection Vulnerability in Pallets Click Affected by Arbitrary OS Commands

CVE-2026-7246

What is CVE-2026-7246?

Pallets Click versions 8.3.2 and earlier are susceptible to a command injection vulnerability in the click.edit() function. This flaw enables attackers with unprivileged accounts to execute arbitrary operating system commands, potentially compromising system integrity and security. It is crucial for users of these versions to update to a secured release to mitigate the risk associated with this vulnerability.

References