CVE-2024-24576

CVE-2024-24576 is a critical command injection vulnerability affecting the Rust standard library on Windows, specifically when invoking batch files with untrusted arguments. An attacker can bypass argument escaping in Rust versions prior to 1.77.2 to execute arbitrary shell commands. This vulnerability carries a CVSS score of 10.0 (Critical) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness, though no public exploit code or active exploitation has been confirmed.