HighVulnerability
CVE-2026-31246: GPT-Pilot command injection in Executor.run() through user-confirmed commands
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-31246
- Published
- Record updated
- Affected
- gpt-pilot <= 0.0.10
- Fixed in
- No fixed version was stated when the source was last read.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.7%
Summary
GPT-Pilot, through commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03), contains a command injection flaw (CWE-78) in the Executor.run() method. When the system asks the user to confirm or modify a command during project execution, it accepts free-text input without validation and passes it directly to asyncio.create_subprocess_shell(). An attacker can replace the intended command with arbitrary shell commands, gaining code execution with the privileges of the GPT-Pilot process.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
- CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
- MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
- HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
- InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek