CVE-2026-26068

CVE-2026-26068 concerns emp3r0r, a Linux-focused C2. Before 3.21.1, untrusted agent metadata (Transport, Hostname) accepted during check-in and interpolated into tmux shell commands executed via /bin/sh -c, enabling command injection and remote code execution on the operator host. The issue is fi...