LazyOwn vulnerabilities

2 known vulnerabilities in LazyOwn from Grisuno. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  LazyOwn: Use of Default Credentials

  CVE-2026-68503Jul 30, 2026Grisuno

  LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payload_schema.py and passes them unchanged to lazyc2.py HTTP Basic authent

• 9.8 Critical severity

  LazyOwn: Missing Authentication for Critical Functionality

  CVE-2026-68502Jul 30, 2026Grisuno

  LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get('value') to LazyOwnShell.one_cmd, reaching LazyOwnShe