Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149

#!/usr/bin/env python3
# check_cve_2026_11192.py
# Verify whether local Chrome/Chromium is below the fixed version for CVE-2026-11192.
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys
from pathlib import Path

FIXED = (149, 0, 7827, 53)


def parse_version(text):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=10)
        out = (p.stdout or '') + ' ' + (p.stderr or '')
        return p.returncode, out.strip()
    except Exception:
        return 1, ''


def candidate_commands():
    cmds = []
    system = platform.system()

    if system == 'Windows':
        local = os.environ.get('LOCALAPPDATA', r'C:\Users\%USERNAME%\AppData\Local')
        pf = os.environ.get('PROGRAMFILES', r'C:\Program Files')
        pfx86 = os.environ.get('PROGRAMFILES(X86)', r'C:\Program Files (x86)')
        candidates = [
            Path(local) / 'Google/Chrome/Application/chrome.exe',
            Path(pf) / 'Google/Chrome/Application/chrome.exe',
            Path(pfx86) / 'Google/Chrome/Application/chrome.exe',
            Path(pf) / 'Chromium/Application/chrome.exe',
            Path(pfx86) / 'Chromium/Application/chrome.exe',
        ]
        for c in candidates:
            if c.exists():
                cmds.append([str(c), '--version'])
        for name in ['chrome', 'chrome.exe', 'chromium', 'chromium.exe']:
            found = shutil.which(name)
            if found:
                cmds.append([found, '--version'])
    elif system == 'Darwin':
        candidates = [
            '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
            '/Applications/Chromium.app/Contents/MacOS/Chromium',
        ]
        for c in candidates:
            if os.path.exists(c):
                cmds.append([c, '--version'])
        for name in ['google-chrome', 'chromium', 'chrome']:
            found = shutil.which(name)
            if found:
                cmds.append([found, '--version'])
    else:
        for name in [
            'google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser', 'chrome'
        ]:
            found = shutil.which(name)
            if found:
                cmds.append([found, '--version'])
        extra = [
            '/opt/google/chrome/chrome',
            '/usr/bin/google-chrome',
            '/usr/bin/google-chrome-stable',
            '/usr/bin/chromium',
            '/usr/bin/chromium-browser',
        ]
        for c in extra:
            if os.path.exists(c):
                cmds.append([c, '--version'])

    # de-duplicate while preserving order
    seen = set()
    unique = []
    for cmd in cmds:
        key = tuple(cmd)
        if key not in seen:
            seen.add(key)
            unique.append(cmd)
    return unique


def main():
    for cmd in candidate_commands():
        rc, out = run_cmd(cmd)
        ver = parse_version(out)
        if ver:
            label = ' '.join(cmd[:-1])
            if ver < FIXED:
                print(f'VULNERABLE: {label} version {".".join(map(str, ver))} is below 149.0.7827.53')
                sys.exit(1)
            else:
                print(f'PATCHED: {label} version {".".join(map(str, ver))} is at or above 149.0.7827.53')
                sys.exit(0)

    print('UNKNOWN: Could not locate a local Chrome/Chromium executable or parse its version')
    sys.exit(2)


if __name__ == '__main__':
    main()