Skip to content
Vulnerability in rxvt-unicode Allows Remote Code Execution

Vulnerability in rxvt-unicode Allows Remote Code Execution

First seen 3 Nov 2026, 22:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 22:46 UTC
  • •Critical vulnerability in rxvt-unicode allows remote code execution.
  • •Affected versions include Ubuntu 20.04, 18.04, and 16.04 LTS.
  • •Users must update and restart rxvt-unicode to mitigate the risk.

A serious vulnerability in the rxvt-unicode terminal emulator has been discovered, allowing attackers to execute arbitrary code by sending specially crafted input. This flaw affects multiple versions of rxvt-unicode across Ubuntu 20.04, 18.04, and 16.04 LTS. Users displaying malicious text in the terminal could have their systems compromised. The issue arises from improper handling of escape sequences within the software. Affected users are advised to update to the latest package versions provided by Ubuntu Pro. After applying the update, a restart of the rxvt-unicode application is required to implement the changes. No has been reported at this time, but the potential for exploitation remains significant. The vulnerability is documented under Ubuntu Security Notice USN-8991-1.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-03
Vulnerability disclosed
Ubuntu published USN-8991-1 detailing a critical flaw in rxvt-unicode that could allow code execution.
Ubuntu
2026-11-03
Patch released
Updates for affected rxvt-unicode versions are available through Ubuntu Pro to address the vulnerability.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

Which versions of rxvt-unicode are affected?
The vulnerability affects rxvt-unicode versions 9.22-6ubuntu0.1 for Ubuntu 20.04, 9.22-3ubuntu0.1 for 18.04, and 9.21-1ubuntu0.1 for 16.04.
What should I do to protect my system?
Update to the latest package versions provided by Ubuntu Pro and restart the rxvt-unicode application.
Is this vulnerability currently being exploited?
No active exploitation has been reported at this time, but the potential for exploitation exists.