CVE-2026-26832 | node-tesseract-ocr up to 2.2.1 src/index.js recognize os command injection

A vulnerability labeled as critical has been found in node-tesseract-ocr up to 2.2.1. Affected by this vulnerability is the function recognize of the file src/index.js. Executing a manipulation can lead to os command injection.

This vulnerability appears as CVE-2026-26832. The attack may be performed from remote. There is no available exploit.