aliasrobotics cai vulnerabilities

Latest aliasrobotics cai CVEs

Newest publication first

1. CVE-2026-25130 Cybersecurity AI vulnerable to command Injection through argument injection in find_file Agent tool

   Published 2026-01-30

   Critical·CVSS 9.7 EPSS 0.91%

   Cybersecurity AI (CAI) is a framework for AI Security. In versions up to and including 0.5.10, the CAI (Cybersecurity AI) framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subproces...

2. CVE-2025-67511 Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool

   Published 2025-12-10

   Critical·CVSS 9.6 EPSS 2.0%

   Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the run_ssh_command_with_credentials() function, which is available to AI agents. Only...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.