Remote Code Execution Vulnerability in taOS by Jaylfc

CVE-2026-67547

What is CVE-2026-67547?

taOS, a self-hosted AI agent operating system, contains a vulnerability that allows authenticated non-admin users to execute arbitrary Python code on the server. The flaw exists in its POST /api/skill-exec/{skill_id}/call API endpoint, where built-in skills, including the execution of code through subprocess.run, can be triggered without proper checks for administrative permissions or skill ownership. This allows potential attackers to send malicious Python code via the request body, executed as the taOS backend process user. This critical flaw compromises the server's integrity and has been addressed in version 1.0.0-beta.23.

References