PT-2025-53614 · Eigent · Eigent

Wendong-Fan · Published 2025-12-27 · Updated 2026-02-19 · CVE-2025-68952

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eigent version 0.0.60

Description Eigent is a multi-agent Workforce platform. A one-click Remote Code Execution (RCE) issue exists in version 0.0.60. This allows an attacker to execute arbitrary code on a victim’s machine or server through a specific interaction requiring only a single click.

Recommendations Update to version 0.0.61 or later.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-68952

GHSA-PWCX-28P4-RMQ4

Affected Products

Eigent

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68952.json · Exploit
• https://github.com/eigent-ai/eigent/security/advisories/GHSA-pwcx-28p4-rmq4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68952 · Security Note
• https://t.me/CVEtracker/40740 · Telegram Post
• https://twitter.com/CVEnew/status/2004868104770486295 · Twitter Post
• https://twitter.com/0dayPublishing/status/2004714010801852833 · Twitter Post
• https://t.me/cveNotify/152457 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2004727548941382046 · Twitter Post