{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.9"}],"component":"cai-framework","cve_ids":["CVE-2025-67511"],"ecosystem":"PyPI","epss":0.02022,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4c65-9gqf-4w8h","id":"tcs_01M5KEXWPQ116QW1Z7TTGV40KA","modified_at":"2026-06-29T12:26:34.897669217Z","published_at":"2025-12-09T22:47:32Z","references":["https://osv.dev/vulnerability/GHSA-4c65-9gqf-4w8h","https://github.com/aliasrobotics/cai/security/advisories/GHSA-4c65-9gqf-4w8h","https://nvd.nist.gov/vuln/detail/CVE-2025-67511","https://github.com/aliasrobotics/cai/commit/09ccb6e0baccf56c40e6cb429c698750843a999c","https://github.com/aliasrobotics/cai","https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-4c65-9gqf-4w8h","url":"https://osv.dev/vulnerability/GHSA-4c65-9gqf-4w8h"}],"summary":"Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool"}