Loading vulnerability…
One-Click Remote Code Execution in Eigent 0.0.60
CVE-2025-68952 is a one-click remote code execution vulnerability in Eigent, a multi-agent workforce platform. Eigent version 0.0.60 permits an attacker to execute arbitrary code on a victim machine or server after a specific single-click interaction.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary code execution on the affected victim machine or server. The available information also reports high confidentiality and integrity impact.
If you can’t patch tonight, do this now.
Until an upgrade to Eigent 0.0.61 can be completed, limit exposure of affected Eigent 0.0.60 deployments and prevent users from performing untrusted or attacker-supplied interactions. No product-specific workaround is available in the supplied information.
Patch, then assume compromise.
Upgrade Eigent to version 0.0.61, which patches CVE-2025-68952.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.