Threats tagged 'ghsa-6cjx-pvcp-jvqq'

HKUDS AnyTool version 0.1.0 contains a vulnerability in the subprocess.run function within the anytool/local_server/main.py file. This flaw allows remote attackers to perform OS command injection by manipulating the command or shell argument. Exploit code is publicly available, but no official response or patch has been issued by the project.