Vulnerability · Published Apr 9, 2026 · Assigned by VulDB
CVE-2026-5831Agions taskflow-ai terminal_execute handlers.ts os command injection
Medium 6.3
In plain English
A medium-severity OS command injection in taskflow-ai from Agions. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A security flaw has been discovered in Agions taskflow-ai up to 2.1.8. This impacts an unknown function of the file src/mcp/server/handlers.ts of the component terminal_execute. Performing a manipulation results in os command injection. The attack is possible to be carried out remotely. Upgrading to version 2.1.9 will fix this issue. The patch is named c1550b445b9f24f38c4414e9a545f5f79f23a0fe. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | taskflow-ai | 2.1.9 | GHSA-3xp3-pr8x-f755 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Agions | taskflow-ai | 2.1.02.1.12.1.22.1.32.1.42.1.52.1.62.1.7 |
Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
References
- VDB-356278 | Agions taskflow-ai terminal_execute handlers.ts os command injection vdb-entry
- VDB-356278 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #789515 | Agions taskflow-ai 2.1.8 Command Injection third-party-advisory
- https://github.com/Agions/taskflow-ai/issues/2 issue-tracking
- https://github.com/Agions/taskflow-ai/commit/c1550b445b9f24f38c4414e9a545f5f79f23a0fe patch
- https://github.com/Agions/taskflow-ai/releases/tag/v2.1.9 patch
- https://github.com/Agions/taskflow-ai/ product