PT-2026-2141 · Greenshot · Greenshot

Lihnucs · Publicado 2026-01-08 · Atualizado 2026-01-13 · CVE-2026-22035

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Greenshot versions 1.3.310 and below

Description Greenshot is a Windows screenshot utility. Versions 1.3.310 and below are susceptible to an OS Command Injection issue due to inadequate sanitization of filenames. The FormatArguments function within the ExternalCommandDestination.cs file (line 269) utilizes string.Format() to incorporate user-provided filenames directly into shell commands without proper sanitization. This allows attackers to execute arbitrary commands by crafting malicious filenames containing shell metacharacters. The issue is addressed in version 1.3.311.

Recommendations Versions prior to 1.3.311 are vulnerable. Update Greenshot to version 1.3.311 or later.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-22035

GHSA-7HVW-Q8Q5-GPMJ

Produtos afetados

Greenshot

Referências · 12

• 🔥 https://github.com/greenshot/greenshot/security/advisories/GHSA-7hvw-q8q5-gpmj · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22035.json · Exploit
• https://github.com/greenshot/greenshot/releases/tag/v1.3.311 · Nota
• https://github.com/greenshot/greenshot/commit/5dedd5c9f0a9896fa0af1d4980d875a48bf432cb · Correção
• https://osv.dev/vulnerability/CVE-2026-22035 · Aviso do Fabricante
• https://t.me/CVEtracker/41667 · Publicação no Telegram
• https://twitter.com/cracbot/status/2011030535221756244 · Publicação no Twitter
• https://twitter.com/pulsepatchio/status/2009635859197210681 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2009149982507757755 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2009134597804589332 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22035 · Nota de Segurança
• https://t.me/cveNotify/148030 · Publicação no Telegram