CVE-2026-95168
thefuck: thefuck: Arbitrary code execution via insecure rule loading
An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products