CVE-2026-84888 - Vulnerability Details

- RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

Description

A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/openfang-runtime/src/tool_runner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Published: 2026-09-02

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

Uncontrolled memory allocation is caused by manipulating the shell_exec function within the tool_runner.rs module of OpenFang. An attacker can trigger the allocation of an arbitrarily large buffer, causing the process to consume excessive memory and potentially crash or become unresponsive. This flaw is a classic resource exhaustion weakness, classified under CWE‑400 and CWE‑789.

Affected Systems

The vulnerability is present in RightNow‑AI OpenFang versions up to 0.6.9. Attackers can target any deployment of these versions that has the tool_runner component enabled.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity overall, with remote attack capability and publicly available exploit code. The EPSS score is not supplied, and the flaw is not listed in the CISA KEV catalog, so current exploitation likelihood is uncertain. Nonetheless, any system that exposes the vulnerable function is at risk of denial of service if an attacker supplies a crafted command that triggers large memory allocation.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

RightNow-AI

OpenFang

affected

Version	Status	Constraints
`0.6.0`	affected	—
`0.6.1`	affected	—
`0.6.2`	affected	—
`0.6.3`	affected	—
`0.6.4`	affected	—
`0.6.5`	affected	—
`0.6.6`	affected	—
`0.6.7`	affected	—
`0.6.8`	affected	—
`0.6.9`	affected	—

No data.

Vendor Product Confidence Versions

Rightnow-ai

Openfang

95%

Version	Status	Scheme	Platform
`0.6.0`	affected	semver	—
`0.6.1`	affected	semver	—
`0.6.2`	affected	semver	—
`0.6.3`	affected	semver	—
`0.6.4`	affected	semver	—
`0.6.5`	affected	semver	—
`0.6.6`	affected	semver	—
`0.6.7`	affected	semver	—
`0.6.8`	affected	semver	—
`0.6.9`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Check the installed OpenFang version to determine if you are running a vulnerable release; if so, upgrade to a version that has the shell_exec allocation fix.
If an immediate upgrade is not possible, mitigate by disabling or restricting usage of shell_exec, or by placing the process in a container or host that enforces strict memory limits to prevent exhaustion attacks.
Stay informed about vendor advisories and apply the official patch as soon as it is released.

Generated by OpenCVE AI on September 3, 2026 at 09:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00276.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/outlookgp/CVE/tree/main/OpenFang_ShellExec_Output_Buffer_DoS_Report
https://vuldb.com/cve/CVE-2026-84888
https://vuldb.com/submit/886466
https://vuldb.com/vuln/398138
https://vuldb.com/vuln/398138/cti

History

Thu, 03 Sep 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 02 Sep 2026 21:30:00 +0000

Type	Values Removed	Values Added
Description		A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell_exec of the file crates/openfang-runtime/src/tool_runner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Title		RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation
First Time appeared		Rightnow-ai Rightnow-ai openfang
Weaknesses		CWE-400 CWE-789
CPEs		cpe:2.3:a:rightnow-ai:openfang::::::::
Vendors & Products		Rightnow-ai Rightnow-ai openfang
References		https://github.com/outlookgp/CVE/tree/main/OpenFang_ShellExec_Output_Buffer_DoS_Report https://vuldb.com/cve/CVE-2026-84888 https://vuldb.com/submit/886466 https://vuldb.com/vuln/398138 https://vuldb.com/vuln/398138/cti
Metrics		cvssV2_0 `{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR'}` cvssV3_0 `{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}` cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Rightnow-ai Openfang

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-09-02T21:15:08.369Z

Updated: 2026-09-03T14:31:00.717Z

Reserved: 2026-09-02T14:18:28.059Z

Link: CVE-2026-84888

Vulnrichment

Updated: 2026-09-03T13:16:03.591Z

NVD

Status : Deferred

Published: 2026-09-03T05:16:47.493

Modified: 2026-09-03T17:25:25.113

Link: CVE-2026-84888

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-03T09:45:03Z

Weaknesses

CWE-400
Uncontrolled Resource Consumption
CWE-789
Memory Allocation with Excessive Size Value

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object