gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who… (CVE-2026-60122)
gpsd through release-3.27.5 contains a code injection vulnerability in the gpsprof utility. An attacker controlling GPS input data can inject malicious content into the SKY.satellites[].used field, which is unsanitized and inserted into a gnuplot heredoc data block. This allows early termination of the heredoc and appending of gnuplot system() calls, leading to arbitrary OS command execution as the user running gpsprof. The vulnerability is fixed at commit 4c06658.
AI Analysis
Technical Summary
The gpsprof utility in gpsd versions up to 3.27.5 has a code injection vulnerability (CWE-94) due to improper sanitization of the SKY.satellites[].used field from GPS input data. This field is inserted directly into a gnuplot heredoc data block without sanitization, enabling an attacker to inject the string 'EOD' to terminate the heredoc early and append malicious gnuplot system() calls. When gnuplot processes the generated plot script in polar mode, these system calls execute arbitrary OS commands with the privileges of the gpsprof process. The issue is fixed at commit 4c06658.
Potential Impact
Successful exploitation allows an attacker who can control GPS input data to execute arbitrary operating system commands with the privileges of the gpsprof utility user. This can lead to unauthorized system access or control. There are no known exploits in the wild at this time.
Mitigation Recommendations
A fix is available and has been applied at commit 4c06658. Users should update gpsd to a version that includes this commit or later to remediate the vulnerability. No additional mitigations are specified.
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who… (CVE-2026-60122)
Description
gpsd through release-3.27.5 contains a code injection vulnerability in the gpsprof utility. An attacker controlling GPS input data can inject malicious content into the SKY.satellites[].used field, which is unsanitized and inserted into a gnuplot heredoc data block. This allows early termination of the heredoc and appending of gnuplot system() calls, leading to arbitrary OS command execution as the user running gpsprof. The vulnerability is fixed at commit 4c06658.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The gpsprof utility in gpsd versions up to 3.27.5 has a code injection vulnerability (CWE-94) due to improper sanitization of the SKY.satellites[].used field from GPS input data. This field is inserted directly into a gnuplot heredoc data block without sanitization, enabling an attacker to inject the string 'EOD' to terminate the heredoc early and append malicious gnuplot system() calls. When gnuplot processes the generated plot script in polar mode, these system calls execute arbitrary OS commands with the privileges of the gpsprof process. The issue is fixed at commit 4c06658.
Potential Impact
Successful exploitation allows an attacker who can control GPS input data to execute arbitrary operating system commands with the privileges of the gpsprof utility user. This can lead to unauthorized system access or control. There are no known exploits in the wild at this time.
Mitigation Recommendations
A fix is available and has been applied at commit 4c06658. Users should update gpsd to a version that includes this commit or later to remediate the vulnerability. No additional mitigations are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9m96-crvq-5qcj
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-60122"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a629b0f9c2644c7f8d863d8
Added to database: 07/23/2026, 22:51:59 UTC
Last enriched: 07/23/2026, 22:53:51 UTC
Last updated: 07/24/2026, 02:25:40 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.