Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.6

zosmaai pi-llm-wiki allows remote command execution

CVE-2026-102911 · published 19 days ago
Summary

The pi-llm-wiki software (versions up to 0.11.7) can run unwanted system commands when a specially crafted web address is supplied. This can be triggered from outside the network, letting an attacker control the server. Updating to version 0.11.8 fixes the problem, so apply the update as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
zosmaai pi-llm-wiki 0.11.0
Original advisory text
zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection
A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki_capture_source MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 0.11.8 is able to address this issue. This patch is called 360867034e79175b45c8e04a98e4ca712bbaca35. Upgrading the affected component is advised.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.6 High
Exploitation
2% chance of attack within 30 days
Type
CWE-77Command Injection
CWE-78OS Command Injection
Timeline
Published30 Sep 2026
Updated15 Oct 2026
First seen30 Sep 2026
Sources
CVE-2026-102911 · NVD
CVE-2026-102911 · MITRE
CVE-2026-102911 · OSV
Track software like this
Free during beta