Severity
High
Analysis Summary
CVE-2022-25926
Node.js window-control module could allow a local attacker to execute arbitrary commands on the system, caused by improper input validation by the sendKeys function. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Command Execution
Indicators Of Compromise
CVE
- CVE-2022-25926
Affected Vendors
Node.js
Affected Products
- Node.js window-control 1.4.4
Remediation
Upgrade to the latest version of window-control, available from the window-control GIT Repository.