CVE-2026-121547— dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata

Quick assessment

Affected

Canop dysk

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Canop dysk 在 3.8.2 版本之前存在终端转义序列注入漏洞。本地攻击者可通过构造包含未净化转义序列的挂载元数据（该元数据会在表格和 CSV 输出中渲染），从而注入控制序列。攻击者可在 FUSE 挂载点的名称或文件系统名称（fsname）中嵌入 ESC/OSC 序列；当其他用户运行 dysk 时，这些序列会导致输出被伪造或隐藏，并更改终端窗口标题。

CVSS 2.2 · Low EPSS 0.14% · P4 Updated Nov 04, 2026

Possible ATT&CK Techniques 2 AI

T1070.001 T1056.001 · Keylogging

Affected Version Matrix 1

Vendor	Product	Version Range	Status
Canop	dysk	`< 3.8.2`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

dysk before 3.8.2 Terminal Escape Sequence Injection via Mount Metadata

Source: CVE Program / CVE List V5

Vulnerability Description

Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control sequences by crafting mount metadata rendered unsanitized in table and CSV output. Attackers can create FUSE mounts with ESC/OSC sequences in mount-point names or fsname, causing spoofed or hidden output and window-title changes when another user runs dysk.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

转义、元或控制序列转义处理不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Canop	dysk	0 ~ 3.8.2	-

II. Public POCs for CVE-2026-121547

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-121547

请登录查看更多情报信息。

Other References for CVE-2026-121547 (6)

https://github.com/Canop/dysk product
https://github.com/Canop/dysk/blob/v3.8.1/cli/src/table.rs#L60-L75 technical-description
https://github.com/Canop/dysk/pull/126 technical-description patch issue-tracking
https://github.com/Canop/dysk/commit/726f4f554d7c1ede21363c29b593ab130ca28d86 patch
https://github.com/Canop/dysk/issues/125 issue-tracking
https://www.vulncheck.com/advisories/dysk-before-3.8.2-terminal-escape-sequence-injection-via-mount-metadata third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-121547

IV. Related Vulnerabilities

Same vendor: Canop

CVE-2026-72847
broot Terminal Escape Sequence Injection via Unsanitized Fil

Same weakness: CWE-150