CVE-2025-67511Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation.
Updated under an hour ago ()
Does this affect you?
It affects aliasrobotics cybersecurity_ai. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the run_ssh_command_with_credentials() function, which is available to AI agents. Only password and command inputs are escaped in run_ssh_command_with_credentials to prevent shell injection; while username, host and port values are injectable. This issue does not have a fix at the time of publication.
- CVSS
- 9.6 CRITICAL (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- Weakness (CWE)
- CWE-77
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Oct 8, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
aliasrobotics cybersecurity_ai aliasrobotics:cybersecurity_ai | through 0.5.9 | NVD |
References
- https://github.com/aliasrobotics/cai/commit/09ccb6e0baccf56c40e6cb429c698750843a999cpatch
- https://github.com/aliasrobotics/cai/security/advisories/GHSA-4c65-9gqf-4w8hexploit, vendor-advisory
- https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itselfexploit, press/media-coverage, third-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.