Skip to content
Threat Feed

Product

Ouroboros-Ai (< 0.39.0)

1 brief RSS
high advisory

Ouroboros-AI Remote Code Execution via Malicious .env File

A remote code execution vulnerability exists in Ouroboros-AI versions prior to 0.39.0, enabling attackers to inject malicious scripts via CLI path variables within a cloned repository's .env file, leading to arbitrary code execution when Ouroboros commands are executed.

ouroboros-ai rce vulnerability supply_chain
2r 1t