CVE-2016-6902: Lshell Project Lshell

Critical severity, CVSS 9.9. EPSS: 5.1% chance of exploitation in the next 30 days.

lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.

Affected products

• Lshell Project Lshell: version 0.9.16 only

Published 2017-04-24. Last modified 2026-06-17.