MinorCritical vulnerability

CVE-2026-108913 (CVSS 7.1)

NVD · officialPublished Oct 11, 2026Risk 23/100

omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executable content from an untrusted Git repository.

Technical details

CVSS

7.1

AV:NetworkAC:HighPR:NoneUI:RequiredC:HighI:HighA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source