{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.9"}],"component":"cai-framework","cve_ids":["CVE-2025-67511"],"ecosystem":"PyPI","epss":0.02022,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4c65-9gqf-4w8h","id":"tcs_01M5KH2YNGFYPGQKKEE3EJS8FR","modified_at":"2026-07-01T20:22:50.111382Z","published_at":"2026-06-29T11:50:38.843030Z","references":["https://osv.dev/vulnerability/PYSEC-2026-302","https://github.com/aliasrobotics/cai/security/advisories/GHSA-4c65-9gqf-4w8h","https://nvd.nist.gov/vuln/detail/CVE-2025-67511","https://github.com/aliasrobotics/cai/commit/09ccb6e0baccf56c40e6cb429c698750843a999c","https://github.com/aliasrobotics/cai","https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself","https://pypi.org/project/cai-framework","https://github.com/advisories/GHSA-4c65-9gqf-4w8h"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"PYSEC-2026-302","url":"https://osv.dev/vulnerability/PYSEC-2026-302"}],"summary":"Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool"}