Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-53694

Potential local privileges escalation through argument injection in the nxchmod.sh script

Description

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NoMachine NoMachine

Default version status: unaffected

  • 7.0.0 to < 9.5.7affected
  • 7.0.0 to < 8.23.2affected

References