CVE-2026-25130
2 advisories.
PyPI/cai-framework CVE-2026-25130: critical 9.6
CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jfpc-wj3m-qw2m
- https://github.com/aliasrobotics/cai/security/advisories/GHSA-jfpc-wj3m-qw2m
- https://nvd.nist.gov/vuln/detail/CVE-2026-25130
- https://github.com/aliasrobotics/cai/commit/e22a1220f764e2d7cf9da6d6144926f53ca01cde
- https://github.com/aliasrobotics/cai
- https://github.com/aliasrobotics/cai/blob/559de8fcbc2b44f3b0360f35ffdc2bb975e7d7e4/src/cai/tools/reconnaissance/filesystem.py#L60
CVE-2026-25130 · published · modified · JSON
PyPI/cai-framework CVE-2026-25130: critical 9.6
CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.10 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-303
- https://github.com/aliasrobotics/cai/security/advisories/GHSA-jfpc-wj3m-qw2m
- https://nvd.nist.gov/vuln/detail/CVE-2026-25130
- https://github.com/aliasrobotics/cai/commit/e22a1220f764e2d7cf9da6d6144926f53ca01cde
- https://github.com/aliasrobotics/cai
- https://github.com/aliasrobotics/cai/blob/559de8fcbc2b44f3b0360f35ffdc2bb975e7d7e4/src/cai/tools/reconnaissance/filesystem.py#L60
- https://pypi.org/project/cai-framework
- https://github.com/advisories/GHSA-jfpc-wj3m-qw2m
CVE-2026-25130 · published · modified · JSON