sh vulnerabilities

1 known vulnerability in sh from Amoffat. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.9 High severity

  sh: Improper Check for Dropped Privileges

  CVE-2026-54552Aug 18, 2026Amoffat

  sh provides Python process launching. Prior to 2.2.4, the _uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with _uid set to an unprivileged user, the child c