CVE-2026-110643

{
  "etk_id": "ETK-2026-1593",
  "cve_id": "CVE-2026-110643",
  "display_id": "CVE-2026-110643",
  "ghsa_id": "GHSA-j3hr-hcvv-fg84",
  "euvd_id": "EUVD-2026-101271",
  "status": "published",
  "anchor_state": "anchored",
  "title": "OS command injection in transcribe2texts",
  "summary": "transcribe2texts versions through 1.0.6 are affected by OS command injection in transcribeAudio(). An attacker who can supply an audioPath value that reaches this function may execute commands with the privileges of the Node.js process.",
  "mitigation": "Do not pass untrusted audioPath values to transcribeAudio(); strictly allowlist expected file locations and isolate the service under a minimally privileged account. Upgrade to a vendor-provided fixed release when one is available; the evidence does not identify a fixed version.",
  "vendor": "kky-ykk",
  "product": "transcribe2texts",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 1.0.6"
      ],
      "ecosystem": "npm",
      "fixed_versions": [],
      "package_name": "transcribe2texts",
      "purl": "pkg:npm/transcribe2texts"
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0264,
  "epss_percentile": 0.8543,
  "epss_asof": "2026-10-21",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 12.729324783333333,
  "t0_at": "2026-10-14T14:17:13.152000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-14T14:17:13.152000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-14T14:17:13.152000+00:00",
      "url": "https://github.com/advisories/GHSA-j3hr-hcvv-fg84"
    }
  }
}