Pentestagent
Approved changes feed: RSS · Atom
cpe:2.3:a:gh05tcrew:pentestagent:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gh05Tcrew (63f6b1b1-19b0-5323-a2af-5fe88d2398e5) |
|---|---|
| Product | Pentestagent (bbfecbd9-ba6a-5e00-b0f0-d7c7cdaaad21) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90618 |
vulnerable | 2026-09-16 04:33:05.484171 |
GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection
HIGH (7.3)
A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute_command of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be performed from remote. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
Published: 2026-09-14T02:30:11.139Z
Updated: 2026-09-14T15:51:40.747Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90617 |
vulnerable | 2026-09-16 04:33:05.296197 |
GH05TCREW PentestAgent MCP HTTP Server main.py run_task os command injection
HIGH (7.3)
A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run_task of the file interface/main.py of the component MCP HTTP Server. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The pull request to fix this issue awaits acceptance.
Published: 2026-09-14T02:15:10.889Z
Updated: 2026-09-15T17:23:55.488Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.