CVE-2017-5932

CVE-2017-5932 is a high-severity vulnerability affecting GNU Bash 4.4, where a flaw in the path autocompletion feature allows local users to escalate privileges. An attacker can achieve this by crafting a malicious filename containing a double quote and a command substitution metacharacter. The vulnerability has a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required. While no public exploits or Metasploit modules are available, and community discussion is minimal, organizations should still patch affected systems to mitigate the risk of local privilege escalation.