Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-90618

1 brief RSS
high advisory

Remote Command Injection in GH05TCREW PentestAgent

A critical remote command injection vulnerability (CVE-2026-90617) exists in the MCP HTTP Server component of GH05TCREW PentestAgent, allowing unauthenticated attackers to execute arbitrary OS commands via the run_task function.

PentestAgent +1 remote-code-execution cve pentest-tool cve-2026-90618 command-injection rce
2t 1c