CVE-2026-68502

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68502", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-30T16:19:08.081Z", "datePublished": "2026-07-30T20:38:05.485Z", "dateUpdated": "2026-07-31T14:07:30.409Z"}, "containers": {"cna": {"title": "LazyOwn: Unauthenticated Socket.IO `input` Event Reaches LazyOwn Command Dispatcher \u2014 Unauthenticated RCE", "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "lang": "en", "description": "CWE-306: Missing Authentication for Critical Function", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4"}, {"name": "https://github.com/grisuno/LazyOwn/commit/2e1e3a7b5da8149ae28a970b5883aefa42921652", "tags": ["x_refsource_MISC"], "url": "https://github.com/grisuno/LazyOwn/commit/2e1e3a7b5da8149ae28a970b5883aefa42921652"}, {"name": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154", "tags": ["x_refsource_MISC"], "url": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154"}], "affected": [{"vendor": "grisuno", "product": "LazyOwn", "versions": [{"version": "< 0.2.154", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-30T20:38:05.485Z"}, "descriptions": [{"lang": "en", "value": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get('value') to LazyOwnShell.one_cmd, reaching LazyOwnShell.do_cmd and subprocess.call(command, shell=True), allowing unauthenticated remote code execution in the C2 process. This issue is fixed in 0.2.154."}], "source": {"advisory": "GHSA-fr84-8cfg-59w4", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-31T14:07:18.664082Z", "id": "CVE-2026-68502", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T14:07:30.409Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-68502", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-31T14:07:18.664082Z"}}}], "references": [{"url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T14:07:10.138Z"}}], "cna": {"title": "LazyOwn: Unauthenticated Socket.IO `input` Event Reaches LazyOwn Command Dispatcher \u2014 Unauthenticated RCE", "source": {"advisory": "GHSA-fr84-8cfg-59w4", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "grisuno", "product": "LazyOwn", "versions": [{"status": "affected", "version": "< 0.2.154"}]}], "references": [{"url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4", "name": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/grisuno/LazyOwn/commit/2e1e3a7b5da8149ae28a970b5883aefa42921652", "name": "https://github.com/grisuno/LazyOwn/commit/2e1e3a7b5da8149ae28a970b5883aefa42921652", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154", "name": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get('value') to LazyOwnShell.one_cmd, reaching LazyOwnShell.do_cmd and subprocess.call(command, shell=True), allowing unauthenticated remote code execution in the C2 process. This issue is fixed in 0.2.154."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306: Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-30T20:38:05.485Z"}}}, "cveMetadata": {"cveId": "CVE-2026-68502", "state": "PUBLISHED", "dateUpdated": "2026-07-31T14:07:30.409Z", "dateReserved": "2026-07-30T16:19:08.081Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-30T20:38:05.485Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "LazyOwn", "vendor": "grisuno", "versions": [{"status": "affected", "version": "< 0.2.154"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get('value') to LazyOwnShell.one_cmd, reaching LazyOwnShell.do_cmd and subprocess.call(command, shell=True), allowing unauthenticated remote code execution in the C2 process. This issue is fixed in 0.2.154."}, {"lang": "es", "value": "LazyOwn RedTeam/APT Framework es un framework de C2 y operaciones de equipo rojo impulsado por IA. Antes de la versi\u00f3n 0.2.154, el archivo lazyc2.py de LazyOwn registra un gestor de eventos de entrada de Socket.IO no autenticado que despacha data.get(\u2019value\u2019) a LazyOwnShell.one_cmd, llegando a LazyOwnShell.do_cmd y subprocess.call(command, shell=True), permitiendo la ejecuci\u00f3n remota de c\u00f3digo no autenticada en el proceso C2. Este problema est\u00e1 solucionado en la versi\u00f3n 0.2.154."}], "id": "CVE-2026-68502", "lastModified": "2026-10-23T22:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-68502", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-31T14:07:18.664082Z", "version": "2.0.3"}}]}, "published": "2026-07-30T21:18:13.317", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/grisuno/LazyOwn/commit/2e1e3a7b5da8149ae28a970b5883aefa42921652"}, {"source": "security-advisories@github.com", "url": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154"}, {"source": "security-advisories@github.com", "url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.2.154)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "LazyOwn", "source": "cna", "vendor": "grisuno"}, "product": "lazyown", "vendor": "grisuno"}], "created": "2026-08-02T05:00:05.020555+00:00", "updated": "2026-08-02T20:34:33.968906+00:00", "vendors": ["grisuno", "grisuno$PRODUCT$lazyown"]}