Description
A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run_task of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The pull request to fix this issue awaits acceptance.
Published: 2026-09-14
Score: 6.9 Medium
EPSS: 2.1% Low
KEV: No
Impact: Remote OS Command Injection
Action: Patch Now
AI Analysis

Impact

An attacker can supply crafted input to the run_task endpoint of the MCP HTTP Server in GH05TCREW PentestAgent, causing the input to be executed as an operating system command on the host machine; this results in remote code execution with the privileges of the agent process and is classified as CWE-77 and CWE-78.

Affected Systems

The vulnerability affects all builds of GH05TCREW PentestAgent that include the MCP HTTP Server component, specifically any version released before the pull request that applies the fix is merged, up to commit cf882dabea3ed91cef016cdd115e5426315665a2; versioning is not specified due to the product’s rolling release model.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity, the EPSS score of 2% shows a low but non‑zero likelihood of automated exploitation, and the vulnerability is not listed in CISA’s KEV catalog; because remote execution is possible over the network, the risk is significant for exposed instances of the MCP HTTP Server.

Generated by OpenCVE AI on September 15, 2026 at 16:40 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the soon as the pending pull request is merged.
  • If the patch is not yet available, disable or restrict access to the MCP HTTP Server endpoint to interrupt exploitation.
  • Limit inbound traffic to networks to reduce exposure.
  • Run the agent with the minimal privileges required, ideally within a container that limits system capabilities.

Generated by OpenCVE AI on September 15, 2026 at 16:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 14 Sep 2026 02:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run_task of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The pull request to fix this issue awaits acceptance.
Title GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection
First Time appeared Gh05tcrew
Gh05tcrew pentestagent
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:gh05tcrew:pentestagent:*:*:*:*:*:*:*:*
Vendors & Products Gh05tcrew
Gh05tcrew pentestagent
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Gh05tcrew Pentestagent
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-15T17:23:55.488Z

Reserved: 2026-09-12T20:02:04.422Z

Link: CVE-2026-90617

cve-icon Vulnrichment

Updated: 2026-09-15T17:23:51.463Z

cve-icon NVD

Status : Deferred

Published: 2026-09-14T03:16:37.083

Modified: 2026-09-15T18:19:37.463

Link: CVE-2026-90617

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-17T19:46:50Z

Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')