CVE-2025-67511

Cybersecurity AI CAI is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the runsshcommandwithcredentials function, which is available to AI agents. Only password and command...

CVE-2025-67511

Cybersecurity AI CAI is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the runsshcommandwithcredentials function, which is available to AI agents. Only password and command...

CVE-2025-67511

CVE-2025-67511 affects Cybersecurity AI (CAI). Versions ≤ 0.5.9 are vulnerable to Command Injection via the run_ssh_command_with_credentials() function exposed to AI agents. Only password and command inputs are escaped to mitigate shell injection; username, host, and port values remain injectable...