Fluxbox vulnerabilities
We track 1 vulnerability in Fluxbox products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Fluxbox vulnerabilities
- 7.8 High severity
fluxbox: Improper Neutralization of Special Elements used in an OS Command
Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme() that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random direct