A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.…

Published:

31 mei 2026 om 22:00:00

Alert date:

1 juni 2026 om 16:08:13

Source:

nvd.nist.gov

Web Technologies, Enterprise Applications

A critical OS command injection vulnerability (CVE-2026-10214) has been identified in zhayujie chatgpt-on-wechat versions up to 2.0.8. The vulnerability affects the _get_safety_warning function in the Bash Tool component and can be exploited remotely. A public exploit is available, making this a high-priority security issue. The vulnerability is fixed in version 2.0.9 with patch 16d9b449c9aa53ccee44144a762a2737d7ba4fc4. Organizations using the affected software should upgrade immediately to prevent potential exploitation.

Technical details

Mitigation steps:

Affected products:

zhayujie chatgpt-on-wechat