CVE-2021-44458

CVE-2021-44458 is a critical vulnerability affecting Linux users running Lens 5.2.6 and earlier, where visiting a malicious website could allow an attacker to execute arbitrary commands as the Lens user. This high-severity flaw (CVSS 9.6) leverages a cross-site websocket connection from the victim's browser to the local Lens terminal, enabling remote code execution with low attack complexity and no prior authentication. While the vulnerability is critical, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.