CVE-2026-15669

A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function ExecTool.Execute of the file internal/agent/tools/exec.go of the component exec Tool. The manipulation results in os command injection. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

• github.comhttps://github.com/louisho5/picobot/
• github.comhttps://github.com/louisho5/picobot/issues/42
• github.comhttps://github.com/louisho5/picobot/issues/43
• vuldb.comhttps://vuldb.com/cve/CVE-2026-15669
• vuldb.comhttps://vuldb.com/submit/855869
• vuldb.comhttps://vuldb.com/submit/855870
• vuldb.comhttps://vuldb.com/vuln/378163
• vuldb.comhttps://vuldb.com/vuln/378163/cti