PT-2026-145534

taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/skill id/call endpoint in taOS executes built-in skills — including the code exec skill which runs arbitrary Python via subprocess.run"python3", "-c", code — without performing any admin role check, skill...