AIKIDO-2026-786482
rioterm is vulnerable to Command Injection
78
High Risk
This Affects:
riotermTL;DR
On Windows, the terminal hint feature opens URLs and file paths detected in terminal output by passing the matched text to a launcher configured as cmd with /c start. Because the standard library only quotes arguments that contain whitespace or a quote character, cmd metacharacters such as & in terminal-displayed text reach the command interpreter as syntax rather than data, so text after them runs as a separate command. Externally influenced output written to the terminal can therefore execute arbitrary commands once a user opens the hint. The fix removes the shell launcher default and hands the target to the platform default handler as a single string.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run the terminal on Windows with the default hint configuration.
Background info
rioterm is vulnerable to Command Injection in versions 0.2.24 - 0.5.9.
How to fix this
Upgrade the rioterm library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant