CVE-2013-7221: Gnome Gnome-Shell

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation.

Affected products

• Gnome Gnome-Shell: up to and including 3.9.92; version 3.0.0 only; version 3.0.0.1 only; version 3.0.0.2 only; version 3.0.1 only; version 3.0.2 only; …

Published 2014-04-29. Last modified 2026-06-17.