CVE-2026-79623
Received Received - Intake

OS Command Injection in FishCodeTech Muteki

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: VulDB

Description
A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the component Default Local Worker Backend. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The issue was closed with the comment (translated from Chinese): "The project will be refactored and shut down."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-79623
EUVD
EUVD-2026-65491

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
fishcodetech pentestgpt to 1.0.0 (inc)
fishcodetech muteki to 0.2.5 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-79623 is an OS command injection vulnerability in FishCodeTech Muteki up to version 0.2.5. It occurs when untrusted CTF attachments place a malicious .claude/settings.json file in the worker directory. When Muteki's local worker extracts the attachment and launches a headless Claude Code session, the malicious configuration file executes arbitrary commands with the worker's privileges.

Detection Guidance

Check for the presence of .claude/settings.json files in directories where Muteki operates or where CTF attachments are extracted. Inspect file contents for suspicious SessionStart hooks or command execution patterns. Use tools like grep to search for .claude directories in worker or project folders.

Impact Analysis

If exploited, this vulnerability allows attackers to execute arbitrary commands on your system with the privileges of the Muteki worker process. This could lead to data theft, exposure of sensitive files, environment variables, or credentials. Attackers could also establish reverse shells or perform other malicious actions depending on the worker's permissions.

Compliance Impact

This vulnerability allows remote command injection via malicious .claude/settings.json files, potentially exposing sensitive data. For GDPR, this could lead to unauthorized access to personal data, violating Article 32 (security of processing). For HIPAA, it risks exposing protected health information if the Muteki worker has access to such data. Compliance may require demonstrating mitigations like isolated execution environments or access controls.

Mitigation Strategies

Avoid launching agents from untrusted directories. Extract archives into data-only subdirectories and strip agent configuration directories from uploads. Disable project-level hooks for untrusted workspaces and run Muteki in a restricted environment with worker isolation enabled.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79623. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart