PT-2026-32198 · Danielmiessler · Personal Ai Infrastructure

Davidgilmore · Published 2026-04-13 · Updated 2026-04-13 · CVE-2026-6141

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions danielmiessler Personal AI Infrastructure versions prior to 2.3.1

Description A flaw exists in danielmiessler Personal AI Infrastructure up to version 2.3.0. The issue resides in an unknown function within the Skills/Parser/Tools/parse url.ts file and allows for os command injection through manipulation. This can be triggered remotely. The exploit has been publicly disclosed.

Recommendations Update to version 2.3.1 or later.

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

CVE-2026-6141

Affected Products

Personal Ai Infrastructure

References · 10

• https://github.com/danielmiessler/Personal_AI_Infrastructure/pull/659 · Patch
• https://github.com/danielmiessler/Personal_AI_Infrastructure/pull/659#issuecomment-3905020094 · Patch
• https://github.com/danielmiessler/Personal_AI_Infrastructure/commit/14322e87e58bf585cf3c7b9295578a6eb7dc4945 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-6141 · Security Note
• https://twitter.com/CVEarity/status/2043730948743921836 · Twitter Post
• https://github.com/danielmiessler/Personal_AI_Infrastructure · Note
• https://vuldb.com/vuln/357005/cti · Note
• https://vuldb.com/submit/793438 · Note
• https://vuldb.com/vuln/357005 · Note
• https://twitter.com/CVEnew/status/2043561028118520054 · Twitter Post