CVE-2026-51870

Deferred Deferred - Pending Action

Command Execution in DeepTutor v1.4.0

Publication date: 2026-09-30

Last updated on: 2026-10-01

Assigner: MITRE

Description

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-10-01

Generated

2026-10-19

AI Q&A

2026-10-01

EPSS Evaluated

2026-10-18

NVD

CVE-2026-51870

Affected Vendors & Products

Vendor	Product	Version / Range
unknow_vendor	deeptutor	1.4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

DeepTutor v1.4.0 contains a command execution vulnerability in the ExecTool.execute function located in /tutorbot/agent/tools/shell.py. This flaw allows an attacker to execute arbitrary commands on the system where DeepTutor is running.

Detection Guidance

To detect this vulnerability, check for unauthorized command execution by monitoring for unexpected file creation or process execution in DeepTutor's workspace. Look for files like deeptutor_note_*.txt or deeptutor_note.txt in the bot's directory. Review WebSocket logs for /api/v1/tutorbot/<bot_name>/ws connections and inspect ExecTool.execute calls in deeptutor/tutorbot/agent/tools/shell.py.

Impact Analysis

This vulnerability could allow an attacker to take control of the system running DeepTutor, potentially leading to unauthorized access, data theft, or further compromise of connected systems. Users should update to a patched version immediately.

Compliance Impact

This vulnerability allows arbitrary command execution on the host system through a WebSocket chat session, which could lead to unauthorized access, data exfiltration, or system compromise. Such risks directly conflict with GDPR's data protection requirements (e.g., Article 32 on security of processing) and HIPAA's safeguards for protected health information (e.g., 45 CFR § 164.308(a)(1)(ii)(B) on security management process). A successful exploit could result in unauthorized disclosure of sensitive data, violating compliance obligations.

Mitigation Strategies

Immediately update DeepTutor to the latest version that patches the command execution vulnerability in /tutorbot/agent/tools/shell.py:ExecTool.execute. If an update is unavailable, disable or remove the ExecTool functionality until a patch is released.

Hi! I’m here to help you understand CVE-2026-51870. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70