What is CVE-2026-90773?

CVE-2026-90773 is a low-severity vulnerability in Dalance Procs, classified under CWE-150. CVSS score: 3.2/10. Published 2026-09-13.

How severe is CVE-2026-90773?

Low severity. CVSS v3 base score is 3.2 out of 10.

Vulnerability in Dalance Procs

CVE-2026-90773

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.

CVSS v3 metric

CVSS v3 base score 3.2 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N.

Affected products

Dalance Procs

Weakness classification (CWE)

CWE-150

References

disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-90773?: CVE-2026-90773 is a low-severity vulnerability in Dalance Procs, classified under CWE-150. CVSS score: 3.2/10. Published 2026-09-13.
How severe is CVE-2026-90773?: Low severity. CVSS v3 base score is 3.2 out of 10.