Vulnerability · Published Sep 14, 2026 · Assigned by VulDB

CVE-2026-90618GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection

High 7.3

In plain English

A high-severity OS command injection in PentestAgent from GH05TCREW. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)2.1%top 18.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute_command of the file runtime/runtime.py of the component LocalRuntime. Executing a manipulation can lead to os command injection. The attack may be performed from remote. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Affected products (as reported)

Vendor	Product	Versions
GH05TCREW	PentestAgent	cf882dabea3ed91cef016cdd115e5426315665a2

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-403199 | GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection vdb-entry, technical-description
VDB-403199 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-90618 | CVE Analysis and Report third-party-advisory
Submit #914809 | GH05TCREW pentestagent v1.0 RCE third-party-advisory
https://github.com/GH05TCREW/pentestagent/issues/91 exploit, issue-tracking
https://github.com/GH05TCREW/pentestagent/pull/100 issue-tracking, patch
https://github.com/GH05TCREW/pentestagent/ product