CVE-2008-0386: Gentoo Xdg-Utils

Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument to (1) xdg-open or (2) xdg-email.

Affected products

• Gentoo Xdg-Utils: up to and including 1.0.2

Published 2008-02-04. Last modified 2026-06-16.