CVE-2026-59561
OS Command Injection in Sakura Editor Allows Arbitrary Command Execution via Open Terminal
Sakura Editor provided by Sakura Editor Development Community contains an OS command injection vulnerability. If a victim user is directed to edit a file in a crafted directory, arbitrary OS command may be executed on the user's PC when the user invokes "Open Terminal".
CVSS 4.0 · 8.4 High
EPSS 1.1%
KEV · Not listed
Vendors
Products