CVE-2025-67511

CVE-2025-67511: 보안 AI 에이전트를 속여 스스로를 해킹하게 만들기 CVE-2025-67511에 대한 Hacktive Security 블로그 게시물 블로그 게시물 링크 : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR cai-framework = 0.5.9에서 AI 에이전트가 사용할 수 있는 함수 도구 runsshcommandwithcredential...

CVE-2026-25130-Cybersecurity-AI-CAI-Framework-0.5.10

CVE-2026-25130 – 사이버보안 AICAI 프레임워크 인자 주입 / OS 명령 주입 PoC 작성자: Mohammed Idrees Banyamer 국가: 요르단 GitHub: https://github.com/yourusername Instagram: @banyamersecurity 개요 이 저장소는 사이버보안 AICAI 프레임워크에서 OS 명령 주입으로 이어지는 인자 주입 취약점을 입증하는 PoCProof of Concept를 포함합니다. 이 문제는 findfile 유틸리티에 존재하며, 사용자 입력이 내부 시스템 명령...

📄 Cybersecurity AI (CAI) Framework 0.5.10 Command Injection

Cybersecurity AI CAI Framework versions 0.5.10 and below suffer from a command injection vulnerability. Exploit Title: Cybersecurity AI CAI Framework 0.5.10 - Command Injection CVE: CVE-2026-25130 Date: 2026-02-03 Exploit Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram:...

Exploit for CVE-2026-25130

CVE-2026-25130 – Cybersecurity AI CAI Framework Argument Inj...

Arbitrary Command Injection

cai-framework is vulnerable to Arbitrary Command Injection. The vulnerability is due to passing user-controlled input directly to shell commands via subprocess.Popen with shell=True, which allows an attacker to inject malicious arguments for example -exec in the findfile tool and execute arbitrar...

CVE-2025-67511

Cybersecurity AI CAI is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the runsshcommandwithcredentials function, which is available to AI agents. Only password and command...

Arbitrary Command Injection

Overview cai-framework is a Cybersecurity AI Framework Affected versions of this package are vulnerable to Arbitrary Command Injection via the runsshcommandwithcredentials function. An attacker can execute arbitrary commands on the host system by supplying crafted values for the username, host, o...