Command Injection Vulnerability in AiSOC by Beenuar
CVE-2026-103056

9.4CRITICAL

Key Information:

Vendor: Beenuar
Status: Aisoc
Vendor: CVE Published:; 30 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-103056?

Versions of AiSOC prior to 12.0.0 are susceptible to a command injection flaw in the actions service. This vulnerability arises due to the improper handling of action parameters in the 'crowdstrike_rtr.py' and 'endpoint.py' scripts. Authenticated users can exploit this issue by injecting unescaped characters into parameters such as file_path, path, script_name, or script_args. This technique allows attackers to break out of the intended command context and execute arbitrary commands on managed endpoints, potentially with SYSTEM or root privileges. Organizations using these affected versions are advised to apply the latest security patches and monitor for any unauthorized access.

Affected Version(s)

AiSOC 7.2.0 < 12.0.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-aisoc
Created by hyderpwn