ThreatSonar Anti-Ransomware by TeamT5 contains a privilege escalation vulnerability (CVE-2026-5967) due to improper neutralization of special elements in OS commands (CWE-78). Authenticated attackers with shell access can inject arbitrary OS commands that execute with root privileges. The vulnerability affects version 0 of the product. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published yet.

Successful exploitation allows an authenticated remote attacker with shell access to execute arbitrary OS commands as root, resulting in full system compromise. This can lead to unauthorized privilege escalation, potentially undermining system security and control.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict shell access to trusted users only and monitor for suspicious activity related to command injection attempts. Avoid exposing the affected product to untrusted networks where possible.