VYPR

taOS

by TaOS

CVEs (1)

  • CVE-2026-67547HigNov 11, 2026
    risk 0.50cvss 8.8epss —

    taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/{skill_id}/call endpoint in taOS executes built-in skills — including the code_exec skill which runs arbitrary Python via subprocess.run(["python3", "-c", code]) — without performing…