CVE-2026-77931

MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse webpage, search web, and torrent metadata parsers, which then get passed to the unrestricted ExecuteCommandTool via asyncio.create subprocess shell. Attackers can craft content that instructs the model to invoke execute command with confirm dangerous set to true, bypassing the validate command safety denylist and exploiting the admin session's is admin context to achieve remote code execution on the host.