CVE-2026-90621
Received Received - Intake

Command Injection in HackingBuddyGPT

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: VulDB

Description
A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh_run_command.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-90621
EUVD
EUVD-2026-77188

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ipa-lab hackingbuddygtp to 0.5.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-90621 is an OS command injection vulnerability in ipa-lab HackingBuddyGPT up to version 0.5.0. It affects the ssh_run_command function in src/hackingBuddyGPT/extensions/ssh_run_command.py. The flaw allows remote attackers to inject malicious commands via unsanitized output from target machines, which is then executed on the operator's workstation without validation.

Detection Guidance

Check for unauthorized tmux sessions or commands executed via tmux send-keys on your operator workstation. Inspect logs for unexpected command execution patterns or suspicious shell outputs from target machines. Review SSH command outputs for embedded malicious payloads in files like /etc/motd or shell aliases.

Impact Analysis

This vulnerability can lead to full compromise of the operator's workstation. Attackers on a target machine can embed malicious commands in outputs like shell messages or files. These commands are executed locally via tmux send-keys, potentially exposing credentials, files, and network resources. Exploitation may enable lateral movement and persistence on high-value systems.

Mitigation Strategies

Sanitize all target machine outputs before they are processed by the LLM. Execute LLM-generated commands in a sandboxed environment. Replace tmux send-keys with a controlled execution layer. Implement strict command content validation and require human confirmation for high-risk commands.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90621. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart