CVE-2026-93966

SxDevOps (versions 1.0/1.1, by aiyiyi121) is affected by a command injection vulnerability in the TASK_RUN_COMMAND component. The flaw resides in the paramiko.SSHClient.exec_command function within backend/ops/host_tasks.py, where unsanitized manipulation of the command argument allows a remote a...

CVE-2026-93966: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected by this vulnerability is the function paramiko.SSHClient.execcommand of the file backend/ops/hosttasks.py of the component TASKRUNCOMMAND. Such manipulation of the argument command leads to command injection. The attack may be...