systemd-journald in systemd 259 does not escape characters in emergency messages that are sent to other users' terminals, potentially leading to display issues. This bug was reported privately to upstream on December 23, 2025, and was disclosed publicly on April 7, 2026.
| Vendor | Product | Versions |
|---|---|---|
| systemd | systemd | 259 |
Updated description with disclosure timeline and changed severity to HIGH, indicating the vulnerability is actively exploited.
Initial creation
