{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-67547", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-29T18:47:17.074Z", "datePublished": "2026-11-11T21:46:37.959Z", "dateUpdated": "2026-11-13T00:09:07.865Z"}, "containers": {"cna": {"title": "taOS: Authenticated Non-Admin Host Code Execution via Skill Runtime", "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "lang": "en", "description": "CWE-862: Missing Authorization", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/jaylfc/taOS/security/advisories/GHSA-h24f-gp4c-8qjm", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/jaylfc/taOS/security/advisories/GHSA-h24f-gp4c-8qjm"}, {"name": "https://github.com/jaylfc/taOS/commit/8998d85190424d5e843880b4ca256e79b653a304", "tags": ["x_refsource_MISC"], "url": "https://github.com/jaylfc/taOS/commit/8998d85190424d5e843880b4ca256e79b653a304"}, {"name": "https://github.com/jaylfc/taOS/releases/tag/v1.0.0-beta.23", "tags": ["x_refsource_MISC"], "url": "https://github.com/jaylfc/taOS/releases/tag/v1.0.0-beta.23"}], "affected": [{"vendor": "jaylfc", "product": "taOS", "versions": [{"version": "< 1.0.0-beta.23", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-11T21:46:37.959Z"}, "descriptions": [{"lang": "en", "value": "taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/{skill_id}/call endpoint in taOS executes built-in skills \u2014 including the code_exec skill which runs arbitrary Python via subprocess.run([\"python3\", \"-c\", code]) \u2014 without performing any admin role check, skill ownership check, or agent assignment verification. Any authenticated non-admin user can supply attacker-controlled Python code in the request body and have it executed as the taOS backend process user on the host, achieving full remote code execution with no privilege escalation required beyond a valid (non-admin) session. This issue has been patched in version 1.0.0-beta.23."}], "source": {"advisory": "GHSA-h24f-gp4c-8qjm", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/jaylfc/taOS/security/advisories/GHSA-h24f-gp4c-8qjm", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-13T00:08:34.351708Z", "id": "CVE-2026-67547", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-13T00:09:07.865Z"}}]}}

{}

{"affected": [{"affectedData": [{"product": "taOS", "vendor": "jaylfc", "versions": [{"status": "affected", "version": "< 1.0.0-beta.23"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/{skill_id}/call endpoint in taOS executes built-in skills \u2014 including the code_exec skill which runs arbitrary Python via subprocess.run([\"python3\", \"-c\", code]) \u2014 without performing any admin role check, skill ownership check, or agent assignment verification. Any authenticated non-admin user can supply attacker-controlled Python code in the request body and have it executed as the taOS backend process user on the host, achieving full remote code execution with no privilege escalation required beyond a valid (non-admin) session. This issue has been patched in version 1.0.0-beta.23."}], "id": "CVE-2026-67547", "lastModified": "2026-11-13T02:18:58.510", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-67547", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-13T00:08:34.351708Z", "version": "2.0.3"}}]}, "published": "2026-11-11T22:17:29.710", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/jaylfc/taOS/commit/8998d85190424d5e843880b4ca256e79b653a304"}, {"source": "security-advisories@github.com", "url": "https://github.com/jaylfc/taOS/releases/tag/v1.0.0-beta.23"}, {"source": "security-advisories@github.com", "url": "https://github.com/jaylfc/taOS/security/advisories/GHSA-h24f-gp4c-8qjm"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/jaylfc/taOS/security/advisories/GHSA-h24f-gp4c-8qjm"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}