Threats affecting pkg:github/fluxionnetwork/fluxion

Fluxion versions before 6.39 contain an OS command injection vulnerability in the fluxion.sh target scanner. This flaw arises because the scanner decodes access point ESSIDs using eval after only escaping single quotes, allowing attackers within Wi-Fi range to craft malicious SSIDs. When the operator scans or selects such an access point, arbitrary commands can be executed with root privileges.