Oh My Posh renders dynamic, potentially attacker-controlled strings (e.g., current directory name, Git commit metadata) into the terminal prompt without sanitizing raw terminal control characters such as ESC, BEL, CSI, and OSC sequences. These control characters are emitted verbatim in the prompt output, allowing an attacker who controls these values to inject terminal escape sequences. Verified sources of attacker-controlled data include directory names and Git commit fields (subject, author, upstream URL). The injected sequences can manipulate the terminal environment, including clipboard contents and window titles, on every prompt render. The vulnerability affects Oh My Posh versions before 29.35.1. A patch is available to neutralize C0/C1 control characters in untrusted segment data before rendering.

The injected terminal escape sequences are executed locally on the victim's terminal each time the prompt renders, enabling clipboard hijacking (via OSC 52), prompt and screen spoofing, window-title manipulation, and potential terminal denial of service. The attack requires the victim to render the prompt with attacker-controlled data, which can be delivered remotely via repository or archive sharing. The vulnerability allows limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector.

A patch is available that neutralizes C0/C1 control characters in untrusted prompt segment data, specifically in the path segment (directory names) and Git segment (commit subject, author, upstream URL). Users should upgrade to version 29.35.1 or later. The existing 'trimAnsi' function applied to console titles has been extended to prompt segments to close this gap. No additional vendor advisory states otherwise.