LuLu UI vulnerabilities

1 known vulnerability in LuLu UI from Yued-fe. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  LuLu UI: Improper Neutralization of Special Elements used in a Command

  CVE-2026-2544Feb 16, 2026Yued-feEPSS 3.13%

  A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec of the file run.js. The manipulation results in os command injection. The attack can be launched remotely. The vendor was contacted early abo