CVE-2026-108913
Code Execution via Untrusted Theme Files in Omarchy
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executable content from an untrusted Git repository.
CVSS 3.1 · 7.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products