Skip to content
Threat Feed
Subscribe

Tag

CVE-2026-6130

1 brief RSS
critical advisory

chatboxai chatbox Command Injection Vulnerability (CVE-2026-6130)

A command injection vulnerability (CVE-2026-6130) exists in chatboxai chatbox versions up to 1.20.0, allowing a remote attacker to execute arbitrary OS commands by manipulating the 'args/env' argument in the StdioClientTransport function, potentially leading to complete system compromise.

chatboxai chatbox command-injection vulnerability chatboxai CVE-2026-6130
2r 1t 1c