Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 28 Aug 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection in 23blocks‑OS ai‑maestro killSessionSync Allows Remote Code Execution | |
| Weaknesses | CWE-78 |
Fri, 28 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input. | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-28T14:23:55.301Z
Reserved: 2026-04-06T00:00:00.000Z
Link: CVE-2026-37751
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-08-28T16:17:46.667
Modified: 2026-08-28T16:17:46.667
Link: CVE-2026-37751
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-28T17:30:08Z
-
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')