PT-2026-7913

CVE-2026-26068

Published

2026-02-12

Updated

2026-02-25

Description by

CVSS 3.1

9.9

Critical

MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions emp3r0r versions prior to 3.21.1

Description emp3r0r is a command and control (C2) tool designed for Linux environments. Versions prior to 3.21.1 accept untrusted agent metadata, specifically Transport and Hostname, during the check-in process. This metadata is then used in tmux shell command strings executed via /bin/sh -c, leading to command injection and potential remote code execution on the operator host.

Recommendations Update to version 3.21.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

Related identifiers