CVE-2022-1292: OpenSSL c_rehash script command injection via unsanitised shell metacharacters

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: high.

high priorityHigh CVSS (7.3) command injection with very high EPSS, though exploitation requires local access and user interaction and it is not in KEV.

What it is

The c_rehash script shipped with OpenSSL fails to sanitise shell metacharacters, allowing command injection. On operating systems that execute the script automatically, an attacker can run arbitrary commands with the privileges of that script. The script is obsolete and should be replaced by the OpenSSL rehash command line tool.

Impact

An attacker gains arbitrary command execution at the privilege level of the c_rehash script, which on some systems is elevated or automated. This can lead to full compromise of the host or the OpenSSL-using service context.

Attack surface

Reached locally per the CVSS vector (AV:L) with low privileges required (PR:L) and user interaction needed (UI:R), typically by placing crafted files or paths that the script processes. No network vector is indicated.

Exploitation

Not listed in CISA KEV and no ransomware usage documented, but EPSS is very high at 0.826 (99.6th percentile), indicating substantial observed or expected exploitation activity. References are advisory and patch commits, with no public exploit tag supplied.

What to do

• Patch OpenSSL to 3.0.3, 1.1.1o, or 1.0.2ze as applicable to the deployed branch.
• Stop using the c_rehash script and switch to the OpenSSL rehash command line tool.
• Remove or restrict execution of c_rehash on systems where it is invoked automatically.
• Audit OS packages and third-party products that bundle OpenSSL for the affected script and update them.
• Restrict local write access to directories processed by c_rehash to trusted users only.

Detection

• Monitor process execution for c_rehash invocations, especially from automated or privileged contexts.
• Alert on shell metacharacters (;, |, $(), backticks) appearing in arguments or filenames passed to c_rehash.
• Hunt for unexpected child processes spawned by c_rehash or by services that call it.
• Review file creation in certificate directories for names containing shell metacharacters.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.