PT-2026-46145 · Ai Cmd · Ai Cmd

Ta-Lun Yen · CVE-2026-49188 · Published 2026-06-04 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ai cmd (affected versions not specified)

Description The ai cmd utility executes with full root permissions and pipes socket inputs directly to the popen() function. This allows unauthenticated users to execute arbitrary commands with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-489

Related Identifiers

CVE-2026-49188

Affected Products

Ai Cmd

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-49188 · Security Note
• https://community.acer.com/en/kb/articles/19707 · Vendor Advisory
• https://t.me/cveNotify/213345 · Telegram Post
• https://t.me/CVEtracker/55796 · Telegram Post
• https://t.me/cveNotify/165912 · Telegram Post
• https://twitter.com/CVEnew/status/2062404809765044373 · Twitter Post