Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-49188

Elevated Root Command Execution via ai_cmd Sockets

Description

The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Acer Connect M6E 5G Portable WiFi Router

Default version status: unaffected

  • * to ≤ M6E_AI_1.00.000019affected

References