UnratedFix available
beagle — security advisory
Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing.
- Products
- beagle
- Affected versions
- Not specified
- Fixed versions
- 0.2.6-2
- CVEs
- CVE-2006-1865
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 20:09 UTC · Revision 1
Source evidence
Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing.
osv:DEBIAN-CVE-2006-1865
beagle
Fixed versions: 0.2.6-2
beagle
Fixed versions: 0.2.6-2
beagle
Fixed versions: 0.2.6-2
Complete source record
{
"id": "5a48ec22943e1007fdd648656d0ace186f9fca94dc5a285d5da6ed29ddf5e998",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2006-1865",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2006-1865",
"summary": "Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing.",
"evidence": "osv:DEBIAN-CVE-2006-1865",
"products": [
{
"name": {
"value": "beagle",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.2.6-2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "beagle",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.2.6-2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "beagle",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.2.6-2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2006-1865",
"aliases": [
"DEBIAN-CVE-2006-1865"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.6-2"
}
]
}
],
"package": {
"name": "beagle",
"purl": "pkg:deb/debian/beagle?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-1865.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.6-2"
}
]
}
],
"package": {
"name": "beagle",
"purl": "pkg:deb/debian/beagle?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-1865.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.6-2"
}
]
}
],
"package": {
"name": "beagle",
"purl": "pkg:deb/debian/beagle?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-1865.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
}
],
"modified": "2026-10-22T23:47:19.451043454Z",
"provider": "osv",
"upstream": [
"CVE-2006-1865"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2006-1865"
]
},
"related_cves": [
{
"value": "CVE-2006-1865",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 410206,
"published_at": "2006-04-21T23:06:00+00:00"
}