{"id":"CVE-2026-90621","state":"PUBLISHED","title":"ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection","description":"A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh_run_command.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.","publishedAt":"2026-09-14T03:15:09.990Z","updatedAt":"2026-09-15T13:58:21.148Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["ipa-lab HackingBuddyGPT"],"affected":[{"vendor":"ipa-lab","product":"HackingBuddyGPT","versions":[{"version":"0.1","status":"affected"},{"version":"0.2","status":"affected"},{"version":"0.3","status":"affected"},{"version":"0.4","status":"affected"},{"version":"0.5.0","status":"affected"}],"cpes":["cpe:2.3:a:ipa-lab:hackingbuddygpt:*:*:*:*:*:*:*:*"]}],"references":["https://vuldb.com/vuln/403203","https://vuldb.com/vuln/403203/cti","https://vuldb.com/cve/CVE-2026-90621","https://vuldb.com/submit/914814","https://github.com/ipa-lab/hackingBuddyGPT/issues/150","https://github.com/ipa-lab/hackingBuddyGPT/"],"weaknesses":["CWE-78","CWE-77"],"ingestedAt":"2026-10-29T20:13:34.582Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/90xxx/CVE-2026-90621.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-90621","state":"PUBLISHED","datePublished":"2026-09-14T03:15:09.990Z","dateUpdated":"2026-09-15T13:58:21.148Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-09-12T20:22:34.583Z"},"containers":{"cna":{"title":"ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection","descriptions":[{"lang":"en","value":"A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh_run_command.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet."}],"affected":[{"vendor":"ipa-lab","product":"HackingBuddyGPT","versions":[{"version":"0.1","status":"affected"},{"version":"0.2","status":"affected"},{"version":"0.3","status":"affected"},{"version":"0.4","status":"affected"},{"version":"0.5.0","status":"affected"}],"cpes":["cpe:2.3:a:ipa-lab:hackingbuddygpt:*:*:*:*:*:*:*:*"]}],"references":[{"url":"https://vuldb.com/vuln/403203","name":"VDB-403203 | ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/403203/cti","name":"VDB-403203 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-90621","name":"CVE-2026-90621 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/914814","name":"Submit #914814 | ipa-lab hackingBuddyGPT v1.0 RCE","tags":["third-party-advisory"]},{"url":"https://github.com/ipa-lab/hackingBuddyGPT/issues/150","tags":["exploit","issue-tracking"]},{"url":"https://github.com/ipa-lab/hackingBuddyGPT/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","type":"CWE","lang":"en","description":"OS Command Injection"}]},{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"Command Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-09-14T03:15:09.990Z"},"timeline":[{"time":"2026-09-12T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-09-12T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-09-12T22:27:39.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"ez-lbz (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202609"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-15T13:42:17.348985Z","id":"CVE-2026-90621","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-15T13:58:21.148Z"}}]}}}