PT-2026-7176 · Zai Shell · Zai-Shell

Ibrahmsql · Publicado 2026-02-09 · Atualizado 2026-02-11 · CVE-2026-25807

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZAI Shell versions prior to 9.0.3

Description ZAI Shell, an autonomous SysOps agent, has an issue in its P2P terminal sharing feature (share start). Before version 9.0.3, this feature opens a TCP socket on port 5757 without authentication. A remote attacker connecting to this port can send arbitrary system commands. If the host user approves these commands without review, they execute with the user's privileges, bypassing Sentinel safety checks. The vulnerable component is the P2P terminal sharing feature, specifically the 'share start' functionality. The affected API endpoint is a TCP socket on port 5757. The vulnerable parameter is the system command sent through the socket.

Recommendations Update to version 9.0.3 or later.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2026-25807

GHSA-6PJJ-R955-34RR

Produtos afetados

Zai-Shell

Referências · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25807.json · Exploit
• https://github.com/TaklaXBR/zai-shell/security/advisories/GHSA-6pjj-r955-34rr · Aviso do Fabricante
• https://github.com/TaklaXBR/zai-shell/commit/a4ea8525d912f55d6e2f09b2869966c52d189a4a · Correção
• https://github.com/TaklaXBR/zai-shell/releases/tag/v9.0.3 · Nota
• https://osv.dev/vulnerability/CVE-2026-25807 · Aviso do Fabricante
• https://twitter.com/pulsepatchio/status/2021601797044048016 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2020998988447560018 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-25807 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2021145165075759263 · Publicação no Twitter