Skip to content
Threat Feed
Subscribe

Product

PentestAgent (Up to Commit Cf882dabea3ed91cef016cdd115e5426315665a2)

1 brief RSS
high advisory

Remote Command Injection in GH05TCREW PentestAgent

A critical remote command injection vulnerability (CVE-2026-90617) exists in the MCP HTTP Server component of GH05TCREW PentestAgent, allowing unauthenticated attackers to execute arbitrary OS commands via the run_task function.

PentestAgent +1 remote-code-execution cve pentest-tool cve-2026-90618 command-injection rce
2t 1c