CyberSecBulletin

Ohmyzsh vulnerabilities

We track 1 vulnerability in Ohmyzsh products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Ohmyzsh vulnerabilities

  • 8.8 High severity

    ohmyzsh: Improper Control of Generation of Code

    CVE-2026-50187Ohmyzsh

    Oh My Zsh is a community-driven framework for managing Zsh configuration. Prior to 2026-05-28, the dotenv plugin in plugins/dotenv/dotenv.plugin.zsh passes ZSH_DOTENV_FILE to source after a directory change into a folder containing a .env file, allowing syntac