OS Command Injection Flaw in zosmaai pi-llm-wiki by zosmaai
⚠️ CVE-Referenzen:
CVE-2026-102911
Zosmaai - Pi-llm-wiki - CRITICAL - CVE-2026-102911.
A vulnerability exists in the zosmaai pi-llm-wiki component, specifically within an unknown function of the mcp/index.ts file. This flaw can be exploited to perform OS command injection through manipulation of the 'url' argument, allowing an attacker to execute commands remotely. The issue has been made public, and the recommended mitigation is to upgrade to version 0.11.8, which addresses this vulnerability through a specific patch identified as 360867034e79175b45c8e04a98e4ca712bbaca35. Users are strongly advised to update their installations to prevent potential exploits.
BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io