CVE-2026-90618

GH05TCREW PentestAgent (up to commit cf882dabea3ed91cef016cdd115e5426315665a2) is vulnerable to OS command injection in the function LocalRuntime.execute_command within the file runtime/runtime.py. The flaw allows a remote, unauthenticated attacker with no user interaction to execute arbitrary co...