Command Execution in DeepTutor v1.4.0

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: MITRE

Description

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-09-30

Generated

2026-10-01

AI Q&A

2026-10-01

EPSS Evaluated

N/A

NVD

CVE-2026-51870

Affected Vendors & Products

Vendor	Product	Version / Range
unknow_vendor	deeptutor	1.4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

DeepTutor v1.4.0 contains a command execution vulnerability in the ExecTool.execute function located in /tutorbot/agent/tools/shell.py. This flaw allows an attacker to execute arbitrary commands on the system where DeepTutor is running.

Impact Analysis

This vulnerability could allow an attacker to take control of the system running DeepTutor, potentially leading to unauthorized access, data theft, or further compromise of connected systems. Users should update to a patched version immediately.

Mitigation Strategies

Immediately update DeepTutor to the latest version that patches the command execution vulnerability in /tutorbot/agent/tools/shell.py:ExecTool.execute. If an update is unavailable, disable or remove the ExecTool functionality until a patch is released.

Hi! I’m here to help you understand CVE-2026-51870. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70