Lucene search
+L

14 matches found

Kitploit
Kitploit
•added 2026/10/09 9:51 p.m.•10 views

gha-lab-7927d7d06f

Purpose server/ provides a local backend FastAPI + PostgreSQL to achieve complete separation between local and cloud environments. After deploying this service, sensitive data such as user registration, model provider configurations, tool settings, and chat history are stored on your machine and...

6.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/01/13 8:38 p.m.•42 views

CVE-2026-22869 Eigent Allows Arbitrary Code Execution via pull_request_target CI Workflow

Eigent is a multi-agent Workforce. A critical security vulnerability in the CI workflow .github/workflows/ci.yml allows arbitrary code execution from fork pull requests with repository write permissions. The vulnerable workflow uses pullrequesttarget trigger combined with checkout of untrusted PR...

9.3CVSS0.00635EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•19 views

Eigent 代码注入漏洞

Eigent is a multi-agent workflow desktop application open-sourced by Eigent AI. Eigent suffers from a code injection vulnerability that stems from a CI workflow using the pullrequesttarget trigger and checking out untrusted PR code, which could lead to arbitrary code execution...

9.8CVSS6.5AI score0.00635EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•8 views

CVE-2026-22869: Improper Control of Generation of Code

Eigent is a multi-agent Workforce. A critical security vulnerability in the CI workflow .github/workflows/ci.yml allows arbitrary code execution from fork pull requests with repository write permissions. The vulnerable workflow uses pullrequesttarget trigger combined with checkout of untrusted PR...

9.8CVSS6.4AI score0.00635EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/29 5:54 a.m.•15 views

CVE-2025-68952

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

9.3CVSS6.6AI score0.00568EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/27 1:15 a.m.•19 views

CVE-2025-68952

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

9.8CVSS0.00568EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/27 12:37 a.m.•18 views

EUVD-2025-205462

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

9.3CVSS6.6AI score0.00568EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/27 12:37 a.m.•37 views

CVE-2025-68952

CVE-2025-68952 : Eigent (multi-agent Workforce) prior to version 0.0.61 is affected by a 1-click Remote Code Execution (RCE) vulnerability in version 0.0.60. The issue allows arbitrary code execution on the victim’s machine/server via a specific one-click interaction. Patch is available in versio...

9.8CVSS6.6AI score0.00568EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/27 12:37 a.m.•8 views

CVE-2025-68952 1-click Remote Code Execution (RCE) vulnerability in Eigent

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

9.3CVSS6.6AI score0.00568EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/27 12:37 a.m.•19 views

CVE-2025-68952 1-click Remote Code Execution (RCE) vulnerability in Eigent

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

9.3CVSS8AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/27 12:37 a.m.•38 views

CVE-2025-68952 1-click Remote Code Execution (RCE) vulnerability in Eigent

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

9.3CVSS0.00568EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/27 12:00 a.m.•15 views

Eigent 代码注入漏洞

Eigent is a multi-agent workflow desktop application open-sourced by Eigent AI. A code injection vulnerability exists in Eigent version 0.0.60, which stems from a 1-click remote code execution vulnerability that could lead to the execution of arbitrary code...

9.8CVSS6.6AI score0.00568EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/27 12:00 a.m.•24 views

PT-2025-53614

Name of the Vulnerable Software and Affected Versions Eigent version 0.0.60 Description Eigent is a multi-agent Workforce platform. A one-click Remote Code Execution RCE issue exists in version 0.0.60. This allows an attacker to execute arbitrary code on a victim’s machine or server through a...

9.8CVSS6.6AI score0.00568EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/27 12:00 a.m.•3 views

CVE-2025-68952: Improper Control of Generation of Code

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution RCE vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction 1-click. This issue has been...

9.8CVSS6.6AI score0.00568EPSS
SaveExploits0References3
Rows per page
Query Builder