CVE-2026-59561 is an OS command injection vulnerability in Sakura Editor provided by the Sakura Editor Development Community. The flaw arises when a user edits a file located in a specially crafted directory, enabling arbitrary OS commands to be executed upon invoking the "Open Terminal" function. This vulnerability requires user interaction and local access to the system. The CVSS 3.0 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary OS command execution on the affected user's machine, potentially compromising confidentiality, integrity, and availability of the system. The attacker must trick the user into opening a file in a malicious directory and then use the "Open Terminal" feature, which could lead to full system compromise depending on user privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been provided at this time. Users should exercise caution when opening files from untrusted directories and avoid invoking the "Open Terminal" feature in suspicious contexts until a fix is available.