CVE-2026-11623

A flaw was found in tmux. A local attacker could exploit a use-after-free vulnerability in the image_free function, potentially leading to information disclosure or denial of service. Exploitation of this flaw is considered difficult due to its high complexity.

This flaw in tmux is rated as Low impact. Exploitation requires local access and is considered difficult due to the high complexity of the attack, limiting the risk to systems where an attacker already has user-level access. The vulnerability could lead to information disclosure or denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.