CVE-2026-31246

GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method. During project execution, when the system prompts the user to confirm or modify a command to be run, it accepts free-text input without proper validation. The user-supplied input is directly passed to asyncio.create_subprocess_shell() for execution. This allows an attacker to replace the intended command with arbitrary shell commands, leading to remote code execution with the privileges of the GPT-Pilot process.

• CWE-78

• https://github.com/Pythagora-io/gpt-pilot
• https://www.notion.so/CVE-2026-31246-35d1e1393188812ea3c6c88ad28d3d57

Published

May 11, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31240The mem0 1.0.0 server lacks authentication and authorization…7.5
• CVE-2026-31241The mem0 1.0.0 server lacks authentication and authorization…6.5
• CVE-2026-31242The mem0 v1.0.0 server lacks authentication and authorizatio…9.1
• CVE-2026-31243The mem0 1.0.0 server lacks authentication and authorization…6.5
• CVE-2026-31244The mem0 1.0.0 server lacks authentication and authorization…6.5
• CVE-2026-31245The mem0 1.0.0 server lacks authentication and authorization…5.3
• CVE-2026-31247Docling's JATS XML backend is vulnerable to XML Entity Expan…7.5
• CVE-2026-31248Docling's METS GBS backend is vulnerable to XML Entity Expan…7.5
• CVE-2026-31249CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf1…7.3
• CVE-2026-3125A Server-Side Request Forgery (SSRF) vulnerability was ident…6.5
• CVE-2026-31250CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf1…7.3
• CVE-2026-31251CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf1…7.3