Threats tagged 'ghsa-q253-8qxh-gx79'

A command injection vulnerability exists in the executeCognitivePulse function of 8421bit MiniClaw up to commit 223c16a1088e138838dcbd18cd65a37c35ac5a84. This flaw allows remote attackers to execute arbitrary OS commands by manipulating input to this function. The product uses a rolling release model, so no specific version numbers are provided. A patch identified by commit 028f62216dee9f64833d0f1cfda7c217067ceba8 is available to address this issue. The vulnerability has a CVSS score of 6.3, indicating medium severity, and public exploit code is available, though no exploitation in the wild has been reported.