Loading vulnerability…
Command injection in Cybersecurity AI (CAI) run_ssh_command_with_credentials()
Cybersecurity AI (CAI) versions 0.5.9 and below contain a command injection vulnerability in the function run_ssh_command_with_credentials(), which is exposed to CAI AI agents. The implementation escapes only the password and command parameters, but fails to properly neutralize shell metacharacters in the username, host, and port inputs. As a result, an attacker who can influence these parameters can inject additional shell syntax into the constructed SSH invocation, leading to execution of arbitrary commands in the context of the CAI process.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Remote command execution on the system running CAI, with consequent compromise of confidentiality, integrity, and availability (e.g., arbitrary command execution, data access/modification, and potential service disruption). The issue is described as remotely exploitable and not requiring authentication in the provided content.
No validated public exploits yet. Hidden: 1 rejected by Mallory's analysis as not a working exploit.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
11 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.