CyberRota Analysis
AI-GeneratedHashcat is vulnerable due to inadequate restrictions on command-line options when parsing restore files, allowing attackers to inject malicious output-redirecting options. This can lead to unauthorized appending of content to arbitrary files, potentially enabling code execution, particularly when targeting shell startup files. Organizations using hashcat should prioritize addressing this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.