CVE-2026-21882
High · 8.4CVSS
8.4
EPSS
0.2%
Published
Mar 2, 2026
CISA due date
—
The record
theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping allows local privilege escalation via command re-execution. This issue has been patched in version 0.2.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | theshit | 0 | 0.2.0 |
Related vulnerabilities
- GHSA-2j3p-gqw5-g59j theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command… Same vulnerability
- CVE-2025-69257 theshit is a command-line utility that automatically detects and fixes common mistakes in… Also affects theshit
- RUSTSEC-2025-0139 theshit vulnerable to unsafe loading of user-owned Python rules when running as root Also affects theshit
- CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
- CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-250
- CVE-2026-69464 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-69409 Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized… CWE-250
- CVE-2026-80238 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250