PT-2026-2141 · Greenshot · Greenshot

Lihnucs · Published 2026-01-08 · Updated 2026-01-13 · CVE-2026-22035

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Greenshot versions 1.3.310 and below

Description Greenshot is a Windows screenshot utility. Versions 1.3.310 and below are susceptible to an OS Command Injection issue due to inadequate sanitization of filenames. The FormatArguments function within the ExternalCommandDestination.cs file (line 269) utilizes string.Format() to incorporate user-provided filenames directly into shell commands without proper sanitization. This allows attackers to execute arbitrary commands by crafting malicious filenames containing shell metacharacters. The issue is addressed in version 1.3.311.

Recommendations Versions prior to 1.3.311 are vulnerable. Update Greenshot to version 1.3.311 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-22035

GHSA-7HVW-Q8Q5-GPMJ

Affected Products

Greenshot

References · 12

• 🔥 https://github.com/greenshot/greenshot/security/advisories/GHSA-7hvw-q8q5-gpmj · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22035.json · Exploit
• https://github.com/greenshot/greenshot/commit/5dedd5c9f0a9896fa0af1d4980d875a48bf432cb · Patch
• https://osv.dev/vulnerability/CVE-2026-22035 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22035 · Security Note
• https://github.com/greenshot/greenshot/releases/tag/v1.3.311 · Note
• https://t.me/CVEtracker/41667 · Telegram Post
• https://twitter.com/cracbot/status/2011030535221756244 · Twitter Post
• https://twitter.com/pulsepatchio/status/2009635859197210681 · Twitter Post
• https://twitter.com/CVEnew/status/2009149982507757755 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2009134597804589332 · Twitter Post
• https://t.me/cveNotify/148030 · Telegram Post