"Windows Systems at Risk: Critical 'BatBadBut' Rust Vulnerability Exposed"
TL;DR
A critical security vulnerability named "BatBadBut" has been found in the Rust standard library on Windows, allowing attackers to execute arbitrary shell commands by bypassing the escaping mechanism when invoking batch files with the Command API. The vulnerability affects versions before 1.77.2 and has a CVSS score of 10.0. The Rust team has released version 1.77.2 with a fix for the issue, and developers are advised to update to mitigate the risk of potential command injection attacks.
- "BatBadBut" Vulnerability Discovered in Rust Standard Library on Windows Cyber Kendra
- Rust rustles up fix for 10/10 critical command injection bug on Windows The Register
- Critical 'BatBadBut' Rust Vulnerability Exposes Windows Systems to Attacks The Hacker News
- Critical Rust flaw enables Windows command injection attacks BleepingComputer
- Critical Rust Flaw Poses Exploit Threat in Specific Windows Use Cases Dark Reading
Want the full story? Read the original reporting
Read on Cyber Kendra