CVE-2026-22584

Critical

Published: 09/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Salesforce Uni2TS through version 1.2.0 contains a code injection vulnerability that allows leveraging executable code in non-executable files. The issue affects MacOS, Windows, and Linux.

Risk Assessment

An attacker can execute malicious code within the application context, potentially leading to data integrity compromise, privilege escalation, or system takeover.

Recommendation

Upgrade Uni2TS to the latest available version that fixes this vulnerability. Also restrict processing of untrusted files.

Original NVD description (English source)

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Executable Code in Non-Executable Files.This issue affects Uni2TS: through 1.2.0.