CVE-2026-74896: Insecure Clear Screen Os System

Invoking os.system('clear') or os.system('cls') executes a shell process that searches the system PATH, creating potential PATH hijacking and binary planting risks. Use ANSI escape sequences (such as sys.stdout.write('\033[2J\033[H')) instead.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-74896-insecure-clear-screen-os-system --engine opengrep

Description

Invoking os.system('clear') or os.system('cls') executes a shell process that searches the system PATH, creating potential PATH hijacking and binary planting risks. Use ANSI escape sequences (such as sys.stdout.write('\033[2J\033[H')) instead.