CVE-2026-90618 | GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2 LocalRuntime runtime/runtime.py LocalRuntime.execute_command os command injection (Issue 91)

September 12, 2026 Yanac

A vulnerability described as critical has been identified in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute_command of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection.

This vulnerability appears as CVE-2026-90618. The attack may be performed from remote. In addition, an exploit is available.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More