Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-90621

ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh_run_command.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ipa-lab HackingBuddyGPT

  • 0.1affected
  • 0.2affected
  • 0.3affected
  • 0.4affected
  • 0.5.0affected

References