zebberncve/cve-2026-26832Advisory for node-tesseract-ocr ⌯⌲ 50 000 weekly downloads
node-tesseract-ocr through version 2.2.1 allows OS command
injection in recognize() in src/index.js. The package builds a
shell command string and executes it with child_process.exec().
Because the input path is only wrapped in double quotes, an attacker
can inject shell syntax through a crafted file path.
| Product | Affected versions | Fixed version |
|---|
| node-tesseract-ocr | all versions through 2.2.1 | no fix available as of 2026-03-24 |
CVE-2026-26832CWE-78 - OS Command Injection9.8 (Critical)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsrc/index.js, recognize()The vulnerable pattern is:
const command = [binary, inputOption, "stdout", ...options].join(" ");
exec(command, ...);
That command string inherits shell parsing. A malicious file path can break out of the quoted argument.
Applications that run OCR on user-supplied images can expose the host
system to command execution if they pass untrusted paths into
recognize().
test.jpg"; touch /tmp/pwned; echo "x
No fixed npm release is available at the time of writing.
If you still depend on this package:
join(" ").execFile() or spawn() with explicit arguments.