VYPR

ai-maestro

by 23blocks OS

CVEs (1)

  • CVE-2026-37751CriAug 28, 2026
    risk 0.57cvss 9.8epss 0.03

    An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attackers to execute arbitrary commands via a crafted input.