CVE-2026-90621: ipa-lab HackingBuddyGPT ssh_run_command.py ssh_run_command os command injection
A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function sshruncommand of the file src/hackingBuddyGPT/extensions/sshruncommand.py. Such manipulation leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need?
The vulnerability can be exploited remotely, but the supplied CVSS vector indicates that the attacker needs low privileges. No user interaction is required.
Are current HackingBuddyGPT deployments potentially affected?
ipa-lab HackingBuddyGPT versions up to and including 0.5.0 are identified as affected. The provided information does not state whether a fix is available.
Is exploitation likely to be practical?
Attack complexity is rated low, and a public exploit is available. These factors may make exploitation more likely where an attacker can obtain the required low-privilege access.
What is the likely security impact?
The vulnerability is an OS command injection in ssh_run_command.py. The supplied CVSS assessment rates confidentiality, integrity, and availability impact as low.