← Database

CVE-2026-37751

CRITICAL CVSS: 9.8 Published: 2026-08-28 Modified: 2026-08-28

Description

An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input.

Affected Platforms

Unknown

Weakness Type

CWE-78

References