CVE-2026-51870 | HKUDS DeepTutor 1.4.0 shell.py ExecTool.execute os command injection

September 30, 2026 Yanac

A vulnerability, which was classified as critical, was found in HKUDS DeepTutor 1.4.0. This affects the function ExecTool.execute of the file /tutorbot/agent/tools/shell.py. Such manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-51870. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More