CVE-2021-3769

CVE-2021-3769 is a critical command injection vulnerability affecting the pygmalion, pygmalion-virtualenv, and refined themes within Oh My Zsh. It allows attackers to execute arbitrary commands by crafting malicious branch names, which are then processed insecurely using 'print -P'. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While no active exploitation or public exploit code has been identified, and community discussion is minimal, the high severity and ease of exploitation warrant immediate patching.