PT-2026-46145

CVE-2026-49188

·

Published

2026-06-04

·

Updated

2026-07-22

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ai cmd (affected versions not specified)
Description The ai cmd utility executes with full root permissions and pipes socket inputs directly to the popen() function. This allows unauthenticated users to execute arbitrary commands with root privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Weakness enumeration
CWE-489: Active Debug Code
Related identifiers
CVE-2026-49188
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com