CVE-2006-7234: Lynx

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

Affected products

• Lynx Lynx: up to and including 2.8.6; version 2.8.1 only; version 2.8.2 only; version 2.8.3 only; version 2.8.4 only; version 2.8.5 only; …

Published 2008-10-27. Last modified 2026-06-16.