cai vulnerabilities

2 known vulnerabilities in cai from Aliasrobotics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  cai: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-25130Jan 30, 2026Aliasrobotics

  Cybersecurity AI (CAI) is a framework for AI Security. In versions up to and including 0.5.10, the CAI (Cybersecurity AI) framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell co

• 9.6 Critical severity

  cai: Improper Neutralization of Special Elements used in a Command

  CVE-2025-67511Dec 11, 2025AliasroboticsEPSS 2.02%

  Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the run_ssh_command_with_credentials() function, which is availabl