CVE-2026-19136: A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively

A command injection vulnerability (a security flaw allowing attackers to run unauthorized operating system commands) was found in the Tianxi AI Agent PC Application used in China. A local user could trigger this vulnerability by opening a specially crafted link that the application processes, potentially allowing an attacker to execute commands on their computer.