Kurz gesagt
- CVE-2026-7246 ist eine Schwachstelle (HOCH (CVSS 7.2)) in click, click (palletsprojects).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.90%, höher als bei 59.7% aller Schwachstellen.
- Abhilfe: auf 8.3.3 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| click PyPI | < 8.3.3
| 8.3.3
|
| click | < 8.3.3
| 8.3.3
|
Description
Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
NVD description
This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below:
Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free