CVE-2023-26107

CVE-2023-26107 is an Arbitrary Code Injection vulnerability affecting all versions of the ebay sketchsvg package. It arises from improper sanitization and parameterization when invoking shell.exec, allowing an attacker to inject malicious code by manipulating the current directory. With a CVSS score of 7.8 (High), this vulnerability has a local attack vector, low attack complexity, and can lead to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.