CVE-2026-103056 AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

🗓️ 30 Sep 2026 00:19:11Reported by VulnCheckType

Command Injection in AiSOC actions service via CrowdStrike RTR allows arbitrary commands.

Reporter	Title	Published	Views	Family All 4
Circl	CVE-2026-103056	30 Sep 202601:19	–	circl
CVE	CVE-2026-103056	30 Sep 202600:19	–	cve
EUVD	EUVD-2026-89540	30 Sep 202600:19	–	euvd
NVD	CVE-2026-103056	30 Sep 202601:16	–	nvd

[
  {
    "vendor": "beenuar",
    "product": "AiSOC",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.2.0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "12.0.0"
      }
    ],
    "repo": "https://github.com/beenuar/AiSOC"
  }
]

Source	Link
github	www.github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7
github	www.github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/clients/crowdstrike_rtr.py
github	www.github.com/beenuar/AiSOC/blob/v11.2.0/services/actions/app/executors/endpoint.py
github	www.github.com/beenuar/AiSOC/commit/dac39723404130312daba15d42d19114f09f75b2
github	www.github.com/beenuar/AiSOC/releases/tag/v12.0.0
vulncheck	www.vulncheck.com/advisories/aisoc-7.2.0-before-12.0.0-command-injection-via-crowdstrike-rtr

30 Sep 2026 00:19Current

CVSS 3.19

CVSS 49.4

CWE-78