Critical Command Execution Flaw in PHP_CodeSniffer Affects Fedora Users

A critical command execution vulnerability has been identified in PHP_CodeSniffer version 4.0.4, affecting users of the Gitblame, Hgblame, or Svnblame reports. The flaw allows potential attackers to execute arbitrary commands on affected systems. All users are advised to update their installations immediately to mitigate risks. The vulnerability was disclosed on August 6, 2026, and is part of a security release aimed at enhancing the software's compliance with coding standards. Users are urged to review their Linux privileges to limit potential compromise and escalation. The flaw specifically impacts Fedora 43 and Fedora 44 users. The update can be installed using the 'dnf' update program. This incident highlights the importance of maintaining updated software to prevent exploitation.

Key Points: • A critical command execution vulnerability affects PHP_CodeSniffer 4.0.4. • Users of Gitblame, Hgblame, or Svnblame reports are particularly at risk. • Immediate updates are recommended for Fedora 43 and Fedora 44 users.