CVE-2006-0126: rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and m...

Security readout for executives and security teams

CVE-2006-0126 affects older rxvt-unicode terminal emulator versions before 6.3. On Linux and most BSD-style platforms, it could leave terminal devices with unintended permissions, letting local users read from or write to those devices. This is mainly a risk on multi-user systems where untrusted local accounts exist. Exposure is most likely on legacy Linux or BSD systems running rxvt-unicode earlier than 6.3 with multiple local users or shell access. Single-user desktops and systems without rxvt-unicode are less likely exposed. Prioritize remediation for shared shell servers, university or lab systems, bastions, and multi-user workstations. This is not evidenced as internet-facing or actively exploited, but it can undermine local session confidentiality and integrity. Mitigation focus: Inventory systems for rxvt-unicode installations and package versions.; Upgrade rxvt-unicode to 6.3 or a later vendor-supported build.; Check operating-system vendor advisories for backported fixes in older package versions..

Prepared

Jun 29, 2026, 15:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.