CVE-2026-SHELL · CVSS 9.8 / Unleaded

Directions2Shell

A critical routing condition that grants any driver a path from their current location to the nearest Shell station. Exploitable remotely. No authentication required. One tap.

1 tapAttack complexity

<¼ tankTrigger condition

~3 miTypical blast radius

24/7Exposure window

Exploit now → Google Maps Apple Maps Waze

What is Directions2Shell?

Directions2Shell is a flaw in the modern road network. Any vehicle running on gasoline or diesel can be routed to a Shell station with a single request to a mapping service. The vulnerability has existed since roads met gas stations and has never been patched, because nobody wants it patched.

Your maps app uses your current location as the origin and resolves the nearest Shell as the destination. If location is off, supply a ZIP code or address in the shell below.

Proof of concept

Type route to get directions from your current location, or route 02110 to start from a ZIP or address. Type help for the full payload list.

driver@localhost: ~ (low fuel)

driver@localhost:~$Command

Exploitation steps

Notice the fuel light. Do not ignore it.
Run route or press Exploit now. Your maps app opens with the route already loaded.
Allow location access when the maps app asks. If it doesn't, pass a ZIP: route 60601.
Drive. Obey traffic laws. The exploit does not grant root on intersections.
Escalate privileges at pump 4. Pay inside if the card reader is acting suspicious.

Affected systems

Platform	Fuel	Status
Passenger vehicles	Gasoline	VULNERABLE
Trucks, some SUVs	Diesel	VULNERABLE
Hybrids	Gasoline + regret about not plugging in	VULNERABLE
Motorcycles	Gasoline	VULNERABLE
Battery EVs	Electrons	Not affected (mostly)
Bicycles	Burrito	Not affected

Indicators of compromise

Amber fuel icon on the instrument cluster
"Range: 12 mi" displayed with unearned confidence
Sudden interest in the price signs of every station you pass
Passenger asking "are we going to make it?"
Engine sputter on uphill grades (critical; act immediately)

Mitigations

Fill up

The vendor-recommended fix. Apply before the tank reaches zero.

Fill up earlier

Defense in depth. Treat ¼ tank as empty.

Walk

Fully mitigates. Not recommended for distances over 2 miles or in loafers.

Buy an EV

Moves you to a different advisory: Directions2Charger. Not yet disclosed.

Disclosure timeline

1886: First gasoline automobile ships. Attack surface created.
1971: First Unix shell. Unrelated, but people keep confusing the two.
2005: Turn-by-turn navigation goes mainstream. Exploit becomes trivial.
2026: Directions2Shell publicly disclosed. Vendor response: "Please come in."

FAQ

Does this track my location?

No. This page never reads your location. The link hands off to your maps app, which asks for permission on its own terms.

Is "nearest" really the nearest?

It's whichever Shell your maps provider ranks first for your location. Usually the closest. Occasionally the one across a river with no bridge. Check the route before committing.

Can I get directions to a seashell?

Try the beach. Coverage is excellent.

Is this an official Shell site?

No. Directions2Shell is an independent parody with no affiliation to Shell plc.

Directions2Shell_