CVE-2026-67547— taOS: Authenticated Non-Admin Host Code Execution via Skill Runtime
Quick assessment
Affected
jaylfc taOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
taOS 是一款自托管的 AI 代理操作系统。在 1.0.0-beta.23 版本之前，taOS 中的 接口在执行内置技能（包括 技能）时，未进行任何管理员角色检查、技能所有权验证或代理分配校验。该 技能通过 执行任意 Python 代码。任何已认证的非管理员用户均可在请求体中提交由攻击者控制的 Python 代码，并在主机上以 taOS 后端进程用户的身份执行，从而在无需额外提权（仅需一个有效的非管理员会话）的情况下实现完整的远程代码执行（RCE）。此漏洞已在 1.0.0-beta.23 版本中修复。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-67547
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
taOS: Authenticated Non-Admin Host Code Execution via Skill Runtime
Source: CVE Program / CVE List V5
Vulnerability Description
taOS is a self-hosted AI agent OS. Prior to version 1.0.0-beta.23, the POST /api/skill-exec/{skill_id}/call endpoint in taOS executes built-in skills — including the code_exec skill which runs arbitrary Python via subprocess.run(["python3", "-c", code]) — without performing any admin role check, skill ownership check, or agent assignment verification. Any authenticated non-admin user can supply attacker-controlled Python code in the request body and have it executed as the taOS backend process user on the host, achieving full remote code execution with no privilege escalation required beyond a valid (non-admin) session. This issue has been patched in version 1.0.0-beta.23.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-67547
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-67547
请登录查看更多情报信息。
Other References for CVE-2026-67547 (3)
-
https://github.com/jaylfc/taOS/releases/tag/v1.0.0-beta.23 x_refsource_MISC
-
https://github.com/jaylfc/taOS/security/advisories/GHSA-h24f-gp4c-8qjm x_refsource_CONFIRM