PT-2026-20911 · Unknown · Skill-Scanner

Richardoc · Published 2026-02-17 · Updated 2026-03-08 · CVE-2026-26057

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Skill-scanner versions 1.0.1 and earlier

Description Skill Scanner is a security scanner for AI Agent Skills designed to detect prompt injection, data exfiltration, and malicious code patterns. A flaw in the API Server component could permit an unauthenticated, remote attacker to interact with the server's API. This interaction could result in a denial-of-service (DoS) condition or the uploading of arbitrary files. The root cause of this issue is an incorrect binding to multiple interfaces. An attacker can exploit this by sending API requests to a device that exposes the affected API Server. A successful exploit could lead to excessive resource consumption (memory starvation) or unauthorized file uploads to arbitrary folders on the compromised device. The API Server is not enabled by default.

Recommendations Upgrade to Skill-scanner version 1.0.2 or later to resolve this issue.

Exploit

Fix

DoS

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2026-26057

GHSA-PPFX-73J5-FHXC

Affected Products

Skill-Scanner

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26057.json · Exploit
• https://github.com/cisco-ai-defense/skill-scanner/commit/1e35e57f3051ecc89ba845ae7206321c8eac20a1 · Patch
• https://github.com/cisco-ai-defense/skill-scanner/security/advisories/GHSA-ppfx-73j5-fhxc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-26057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26057 · Security Note
• https://osv.dev/vulnerability/GHSA-ppfx-73j5-fhxc · Vendor Advisory
• https://github.com/cisco-ai-defense/skill-scanner · Note
• https://twitter.com/ai_security_10x/status/2030751927957594515 · Twitter Post
• https://twitter.com/tau_rho_ai/status/2025282095547904117 · Twitter Post
• https://t.me/cveNotify/153284 · Telegram Post
• https://twitter.com/ai_security_10x/status/2030521212779327537 · Twitter Post
• https://twitter.com/CVEnew/status/2025809102283342239 · Twitter Post