CVE-2026-103431

This vulnerability is rated as having an Important impact because an unprivileged local user on a monitored host can cross security boundaries to compromise the terminal session of an administrative operator. In enterprise monitoring environments, the colmux aggregation tool consolidates process telemetry from distributed systems running collectl and displays it directly to administrative consoles. Because control characters from remote process names are processed without neutralization, this enables arbitrary screen manipulation and, depending on the operator's terminal configuration, potential command injection. Although exploitation requires active operator observation and specific terminal capabilities, the ability to facilitate remote privilege escalation across systems warrants the Important rating.