CVE-2026-49188

The CVE-2026-49188 entry concerns the ai_cmd utility, which executes with full root permissions. The vulnerability arises because input received over a socket is piped directly to popen(), enabling unauthenticated users to cause arbitrary root commands to run. This is described in multiple source...