CVE-2026-3964

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3964", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-11T13:08:22.273Z", "datePublished": "2026-03-11T23:02:10.537Z", "dateUpdated": "2026-03-12T13:29:32.389Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-11T23:02:10.537Z"}, "title": "OpenAkita Chat API Endpoint shell.py run os command injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-78", "lang": "en", "description": "OS Command Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-77", "lang": "en", "description": "Command Injection"}]}], "affected": [{"vendor": "n/a", "product": "OpenAkita", "versions": [{"version": "1.24.0", "status": "affected"}, {"version": "1.24.1", "status": "affected"}, {"version": "1.24.2", "status": "affected"}, {"version": "1.24.3", "status": "affected"}], "modules": ["Chat API Endpoint"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Executing a manipulation of the argument Message can lead to os command injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4.3, "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-03-11T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-11T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-11T14:13:44.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "din4 (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/?id.350393", "name": "VDB-350393 | OpenAkita Chat API Endpoint shell.py run os command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.350393", "name": "VDB-350393 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.768692", "name": "Submit #768692 | OpenAkita openakita \u22641.24.3 Local Privilege Escalation", "tags": ["third-party-advisory"]}, {"url": "https://www.notion.so/OpenAkita-Local-Privilege-Escalation-via-Arbitrary-Command-Execution-314ea92a3c418075b1acd98f493860e2", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-12T13:29:25.386226Z", "id": "CVE-2026-3964", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T13:29:32.389Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3964", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-12T13:29:25.386226Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T13:29:28.896Z"}}], "cna": {"title": "OpenAkita Chat API Endpoint shell.py run os command injection", "credits": [{"lang": "en", "type": "reporter", "value": "din4 (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4.3, "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "n/a", "modules": ["Chat API Endpoint"], "product": "OpenAkita", "versions": [{"status": "affected", "version": "1.24.0"}, {"status": "affected", "version": "1.24.1"}, {"status": "affected", "version": "1.24.2"}, {"status": "affected", "version": "1.24.3"}]}], "timeline": [{"lang": "en", "time": "2026-03-11T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-11T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-11T14:13:44.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.350393", "name": "VDB-350393 | OpenAkita Chat API Endpoint shell.py run os command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.350393", "name": "VDB-350393 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.768692", "name": "Submit #768692 | OpenAkita openakita \u22641.24.3 Local Privilege Escalation", "tags": ["third-party-advisory"]}, {"url": "https://www.notion.so/OpenAkita-Local-Privilege-Escalation-via-Arbitrary-Command-Execution-314ea92a3c418075b1acd98f493860e2", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Executing a manipulation of the argument Message can lead to os command injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "OS Command Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "Command Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-11T23:02:10.537Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3964", "state": "PUBLISHED", "dateUpdated": "2026-03-12T13:29:32.389Z", "dateReserved": "2026-03-11T13:08:22.273Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-11T23:02:10.537Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Chat API Endpoint"], "product": "OpenAkita", "vendor": "n/a", "versions": [{"status": "affected", "version": "1.24.0"}, {"status": "affected", "version": "1.24.1"}, {"status": "affected", "version": "1.24.2"}, {"status": "affected", "version": "1.24.3"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Executing a manipulation of the argument Message can lead to os command injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Se ha identificado una debilidad en OpenAkita hasta la versi\u00f3n 1.24.3. Esto afecta a la funci\u00f3n run del archivo src/openakita/tools/shell.py del componente Chat API Endpoint. La ejecuci\u00f3n de una manipulaci\u00f3n del argumento Message puede conducir a una inyecci\u00f3n de comandos del sistema operativo. El ataque est\u00e1 restringido a la ejecuci\u00f3n local. El exploit se ha puesto a disposici\u00f3n del p\u00fablico y podr\u00eda ser utilizado para ataques. Se contact\u00f3 al proveedor con antelaci\u00f3n sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-3964", "lastModified": "2026-06-17T10:44:31.560", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3964", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-12T13:29:25.386226Z", "version": "2.0.3"}}]}, "published": "2026-03-11T23:16:01.237", "references": [{"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.350393"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.350393"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.768692"}, {"source": "cna@vuldb.com", "url": "https://www.notion.so/OpenAkita-Local-Privilege-Escalation-via-Arbitrary-Command-Execution-314ea92a3c418075b1acd98f493860e2"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}, {"lang": "en", "value": "CWE-78"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.24.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.24.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.24.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.24.3"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "product": "openakita", "vendor": "openakita"}], "analysis": {"en": {"generated_at": "2026-03-17T16:16:29.337972+00:00", "value": {"mitigation_remediation": ["If available, upgrade OpenAkita to the latest release that addresses the shell command injection. ", "Disable or remove the Chat API Endpoint shell functionality orconfigure routing to avoid exposing the vulnerable endpoint. ", "Add input validation or sanitization to the Message parameter to prevent command injection or whitelist acceptable commands. ", "Run the service with the least privilege possible (non\u2011root or dedicated unprivileged user) to limit the impact of any injected commands. ", "Monitor system logs for unexpected command execution and restrict local user permissions to mitigate potential exploitation."], "summary": {"action": "Patch or Monitor", "impact": "Local Command Execution"}, "threat_synthesis": {"affected_systems": "Affected systems are installations of OpenAkita version 1.24.3 and earlier, all builds that include the src/openakita/tools/shell.py component remain vulnerable until a patch is applied. The vulnerable component is the Chat API Endpoint in the OpenAkita suite. No specific vendor patch has been released as of the last advisory; the vendor has not responded to the disclosure request.", "description_and_impact": "The vulnerability is a local OS command injection in the Chat API Endpoint's shell.py. An attacker can manipulate the Message argument to execute arbitrary shell commands via the run function. This compromises the confidentiality and integrity of the local system, potentially allowing full takeover. The issue is classified as CWE-77 and CWE-78 and is rated 4.8 on the CVSS v3 scale, indicating moderate severity.", "risk_and_exploitability": "The EPSS score of <1% and absence from the CISA KEV list suggest the likelihood of exploitation is low at present, but public exploits have been shared. The attack vector requires local access to the service, so protecting the application\u2019s runtime privileges and tightening input validation are critical. Until an official fix is available, disabling the vulnerable endpoint or restricting local user access is recommended."}}}}, "created": "2026-03-12T09:55:05.857465+00:00", "updated": "2026-03-20T15:36:39.850667+00:00", "vendors": ["openakita", "openakita$PRODUCT$openakita"]}