A
100/100 First Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
1
Score
100/100
LOW 1
Findings (1)
LOW
Terminal multiplexer command injection
L234 Detects tmux/screen send-keys used to inject commands into terminal sessions
tmux send-keys FIX
Avoid sending unsanitized user input to tmux/screen sessions via send-keys. Use a controlled command dispatch mechanism instead of injecting commands into terminal multiplexers.
FP?
Likely FP if the match is in documentation describing tmux/screen workflow automation for the user themselves, not controlled by an external agent.