CVE-2026-121547
Low
Description
Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control sequences by crafting mount metadata rendered unsanitized in table and CSV output. Attackers can create FUSE mounts with ESC/OSC sequences in mount-point names or fsname, causing spoofed or hidden output and window-title changes when another user runs dysk.
SeverityLow
CVSS2.2
Exploit probability—
ProductCanop Dysk
PublishedNov 3, 2026
First seenNov 4, 2026
Weakness typeCWE-150CWE-150
How to fix
Update
- Canop dysk3.8.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canop dysk | v < 3.8.2 | 3.8.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.