CVE-2026-51881

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-01

Last updated on: 2026-10-06

Assigner: MITRE

Description

deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool layer to execute reviewer-chosen shell commands in the service environment.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-01

Last Modified

2026-10-06

Generated

2026-10-19

AI Q&A

2026-10-02

EPSS Evaluated

2026-10-18

NVD

CVE-2026-51881

EUVD

EUVD-2026-91124

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

deeptutor 1.4.0 has a code injection vulnerability in the ExecTool.execute function. This allows a remote attacker to execute arbitrary shell commands through the live tutorbot WebSocket interface, potentially compromising the service environment.

Detection Guidance

To detect CVE-2026-51881, monitor network traffic for WebSocket connections to deeptutor 1.4.0. Check for unexpected shell command execution logs or processes spawned by the deeptutor service. Inspect WebSocket messages for command injection patterns like semicolons or pipes.

Impact Analysis

This vulnerability could allow an attacker to run malicious commands on the system running deeptutor 1.4.0, leading to unauthorized access, data theft, or system compromise. Users of the affected software should update immediately.

Compliance Impact

This vulnerability allows remote code execution via shell commands through the WebSocket interface, which could lead to unauthorized data access, modification, or exfiltration. This directly violates GDPR's data protection requirements and HIPAA's safeguards for protected health information by enabling potential breaches of confidentiality and integrity.

Mitigation Strategies

Immediately disable the live tutorbot WebSocket interface to prevent remote command execution. Update deeptutor to a patched version if available. Monitor network traffic for suspicious shell command patterns.

Hi! I’m here to help you understand CVE-2026-51881. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70