Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-85672zerox 1.1.20 OS Command Injection via Document URL File Extension

Critical 9.8

In plain English

A critical-severity OS command injection in zerox from getomni-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)2.6%top 14.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

zerox 1.1.20 contains an OS command injection vulnerability in the file download mechanism where the temporary file extension derived from document URLs is interpolated unsanitized into shell commands executed by poppler utilities. Attackers can craft document URLs with malicious file extensions containing command substitution syntax to execute arbitrary OS commands before document processing occurs.

Affected products (as reported)

Vendor	Product	Versions
getomni-ai	zerox	0 – through 1.1.20

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

GitHub Issue #206 issue-tracking
https://github.com/getomni-ai/zerox product
https://github.com/getomni-ai/zerox/blob/main/node-zerox/src/utils/file.ts technical-description
VulnCheck Advisory: zerox 1.1.20 OS Command Injection via Document URL File Extension third-party-advisory