CVE-2026-116118: Z.ai Zcode Sed Command Filter os command injection

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation is network-accessible, has low attack complexity, and does not require user interaction.

Q: Which versions should be treated as affected?

Z.ai Zcode versions up to 3.14.3 and 3.15.1 are identified as affected. The provided information does not identify a fixed version.

Q: Is public exploit information available?

Yes. The exploit has been publicly disclosed and may be used.

Published Oct 26, 2026

Updated

A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Z.ai ZCode<=3.14.3, <=3.15.1

Event History

Oct 26, 2026

CVE Published

via MITRE·04:30 AM

Data Sourced

via MITRE·04:30 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation is network-accessible, has low attack complexity, and does not require user interaction.

Which versions should be treated as affected?

Z.ai Zcode versions up to 3.14.3 and 3.15.1 are identified as affected. The provided information does not identify a fixed version.

Is public exploit information available?