The vulnerability in hashcat (CVE-2026-68766) arises from insufficient validation of command-line options during the parsing of restore files. This allows an attacker to inject options that redirect output to arbitrary files, such as --outfile and --potfile-path. Exploiting this, an attacker can append malicious content to files that may be executed, for example, shell startup scripts, leading to code execution. The CVSS v3.1 score is 7.8 (High), reflecting the local attack vector with low complexity, no privileges required, but requiring user interaction. The impact includes high confidentiality, integrity, and availability consequences. There is no information provided about patches or fixed versions.

Successful exploitation can lead to arbitrary code execution by appending attacker-controlled content to arbitrary files, including shell startup files. This compromises confidentiality, integrity, and availability of the affected system. The attack requires local access and user interaction but no privileges, making it a significant risk in environments where users can be tricked into restoring crafted files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid loading untrusted restore files in hashcat. Restrict access to restore files and monitor for suspicious modifications. Follow vendor updates for official patches or mitigations.