PT-2026-39616 · Gpt-Pilot · Gpt-Pilot

Published 2026-05-11 · Updated 2026-05-11 · CVE-2026-31246

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions GPT-Pilot versions prior to commit 0819827ce20346ef5f25b3fe29293cb448840565

Description Command injection occurs in the Executor.run() method. During project execution, the system accepts free-text input for confirming or modifying commands without proper validation. This input is passed directly to asyncio.create subprocess shell(), allowing an attacker to execute arbitrary shell commands with the privileges of the GPT-Pilot process.

Recommendations Update to a version beyond commit 0819827ce20346ef5f25b3fe29293cb448840565. As a temporary workaround, restrict the use of the Executor.run() method to trusted users only.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-31246

GHSA-M85W-WHWH-QVFX

Affected Products

Gpt-Pilot

References · 6

• https://osv.dev/vulnerability/GHSA-m85w-whwh-qvfx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31246 · Security Note
• https://github.com/Pythagora-io/gpt-pilot · Note
• https://notion.so/CVE-2026-31246-35d1e1393188812ea3c6c88ad28d3d57 · Note
• https://twitter.com/VulmonFeeds/status/2053974510185935043 · Twitter Post
• https://twitter.com/CVEnew/status/2053954539602973167 · Twitter Post