Command Injection Vulnerability in aiyiyi121 SxDevOps Product
CVE-2026-93967

5.1MEDIUM

Key Information:

Vendor

Aiyiyi121

Status
Sxdevops
Vendor
CVE Published:
20 September 2026

What is CVE-2026-93967?

A security flaw has been identified in aiyiyi121 SxDevOps versions 1.0 and 1.1, specifically within the Command Handler component's generate_host_task function. By manipulating the argument command, attackers can execute arbitrary commands, leading to potential remote exploitation. It is crucial to apply the recommended patch (commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9) to safeguard against this threat. The vendor has promptly released a fix to address this issue.

Affected Version(s)

SxDevOps 1.0

SxDevOps 1.1

References

https://vuldb.com/vuln/407926
vdb-entrytechnical-description
https://vuldb.com/vuln/407926/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-93967
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

_lxf (VulDB User)
VulDB CNA Team
.