CVE-2026-7246
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Apr 30, 2026
Vendor
unknown
Description
Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.