Based on the description, the flaw in DeepTutor’s ExecTool permits an attacker who can reach the /tutorbot/agent/tools/shell endpoint to execute arbitrary shell commands on the host. The likely attack vector is a direct request to this endpoint. This unrestricted command execution can lead to full system compromise, including data exfiltration, persistence, or other malicious activity. The description indicates that untrusted input is passed directly to a system command without validation, a classic system command injection vulnerability (CWE‑78).

DeepTutor version 1.4.0 is affected. The vulnerability originates in the file /tutorbot/agent/tools/shell.py within the ExecTool.execute method. No other versions or products are listed in the provided data.

The CVSS score is 9.8, classifying the flaw as critical. The EPSS score indicates a very low exploitation probability (< 1 %), and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that an unauthenticated attacker who can reach /tutorbot/agent/tools/shell can execute arbitrary shell commands. The likely attack vector is direct access to this exposed web or API endpoint, requiring no additional authentication. As a result, the risk to confidentiality, integrity, and availability is total, potentially leading to full system compromise, data exfiltration, persistence, or other malicious activity.