Uncontrolled Memory Allocation in RightNow-AI OpenFang by RightNow-AI
CVE-2026-84888

5.3MEDIUM

Key Information:

Vendor: Rightnow-ai
Status: Openfang
Vendor: CVE Published:; 2 September 2026

🔔 Create Rightnow-ai Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-84888?

A vulnerability has been identified in RightNow-AI OpenFang, specifically affecting the shell_exec function within the tool_runner.rs file. This flaw leads to uncontrolled memory allocation, enabling remote attackers to exploit the system. The vulnerability has been public since its disclosure, and despite early attempts to inform the vendor about the issue, there has been no response. Users of OpenFang versions up to 0.6.9 are advised to take necessary precautions to secure their deployments against potential exploits.

Affected Version(s)

OpenFang 0.6.0

OpenFang 0.6.1

OpenFang 0.6.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-84888 - Proof of Concept