PT-2026-7176 · Zai Shell · Zai-Shell

Ibrahmsql · Published 2026-02-09 · Updated 2026-02-11 · CVE-2026-25807

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ZAI Shell versions prior to 9.0.3

Description ZAI Shell, an autonomous SysOps agent, has an issue in its P2P terminal sharing feature (share start). Before version 9.0.3, this feature opens a TCP socket on port 5757 without authentication. A remote attacker connecting to this port can send arbitrary system commands. If the host user approves these commands without review, they execute with the user's privileges, bypassing Sentinel safety checks. The vulnerable component is the P2P terminal sharing feature, specifically the 'share start' functionality. The affected API endpoint is a TCP socket on port 5757. The vulnerable parameter is the system command sent through the socket.

Recommendations Update to version 9.0.3 or later.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-25807

GHSA-6PJJ-R955-34RR

Affected Products

Zai-Shell

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25807.json · Exploit
• https://github.com/TaklaXBR/zai-shell/security/advisories/GHSA-6pjj-r955-34rr · Vendor Advisory
• https://github.com/TaklaXBR/zai-shell/commit/a4ea8525d912f55d6e2f09b2869966c52d189a4a · Patch
• https://osv.dev/vulnerability/CVE-2026-25807 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25807 · Security Note
• https://github.com/TaklaXBR/zai-shell/releases/tag/v9.0.3 · Note
• https://twitter.com/pulsepatchio/status/2021601797044048016 · Twitter Post
• https://twitter.com/CveFindCom/status/2020998988447560018 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2021145165075759263 · Twitter Post