Hhaamu

**Name of the Vulnerable Software and Affected Versions** comix version 3.6.4 **Description** The issue allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs. **Recommendations** For comix version 3.6.4, consider updating to a newer version that properly sanitizes filenames to prevent command execution. As a temporary workaround, restrict the use of the rar, unrar, and jpegtran programs within comix until a patch is available.