CVE-2026-25130: cai-framework Command Injection Vulnerability in find_file Function
Summary
CVE-2026-25130: CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection. Affects cai-framework versions < 0.5.10. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The cai-framework is a cybersecurity AI framework designed to assist in various reconnaissance tasks, including file system searches. It provides tools that allow users to execute commands for locating files and analyzing system behavior. However, the framework has a critical vulnerability in its find_file function, which can be exploited to execute arbitrary commands on the host system due to improper handling of user input.
Vulnerability Detail
The vulnerability arises from the find_file function in the cai-framework, where user-controlled input is directly passed to shell commands using subprocess.Popen() with shell=True. This lack of input sanitization allows attackers to inject malicious arguments, leading to command injection. The attacker can exploit this by hosting a webpage with malicious instructions, tricking the victim's CAI agent into executing arbitrary commands, thereby achieving Remote Code Execution (RCE). The vulnerability is classified under CWE-78, indicating a command injection flaw.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid using the find_file function with untrusted input. Instead, consider using alternative methods for file searching that do not involve executing shell commands directly.
Conclusion
The cai-framework has a critical command injection vulnerability in its find_file function, which can lead to Remote Code Execution. It is essential to update the package to the latest version to mitigate this risk. Users should also be cautious about using untrusted input with this function.
See every vulnerability recorded for cai-framework →
FAQ
CVE-2026-25130 is a critical command injection vulnerability found in the find_file function of the cai-framework, allowing attackers to execute arbitrary commands.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 9.6, indicating a critical level of severity.
If you cannot update the package, avoid using the find_file function with untrusted input as a temporary workaround.
More information about the cai-framework can be found on its GitHub repository and documentation pages.
References
Related vulnerabilities
Recent vulnerabilities recorded for cai-framework.
