Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-84809— Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Quick assessment

Affected
Tencent AI-Infra-Guard
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

腾讯 AI-Infra-Guard 的 skill-scan 组件通过将 目录以及 、 、 扩展名硬编码到多个扫描层面的跳过列表中，从而将编译后的 Python 字节码文件排除在分析之外。攻击者可以分发包含良性 Python 源文件与恶意编译字节码的技能包，这些字节码会在导入时执行，而扫描器却报告其为安全判定。当运维人员安装该技能时，恶意代码即可被执行，从而实现代码执行攻击。

CVSS 6.5 · Medium

Possible ATT&CK Techniques 1 AI

T1589.003 · Employee Names

Affected Version Matrix 3

VendorProduct Version RangeStatus
Tencent AI-Infra-Guard < 4.5.2 affected
4.6.0≤ 4.6.0 affected
Tencent aig-skill-scan ≤ 0.2.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-84809

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
Source: CVE Program / CVE List V5
Vulnerability Description
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside malicious compiled bytecode that executes on import while the scanner reports a safe verdict, enabling code execution when operators install the skill.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Tencent AI-Infra-Guard 0 ~ 4.5.2 -
Tencent aig-skill-scan 0 ~ 0.2.1 -

II. Public POCs for CVE-2026-84809

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-84809

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-84809 (2)

Vendor Advisories for CVE-2026-84809 (1)

Proof of Concept for CVE-2026-84809 (1)

Other References for CVE-2026-84809 (2)

IV. Related Vulnerabilities

Same product: AI-Infra-Guard
Same vendor: Tencent
Same weakness: CWE-693

V. Comments for CVE-2026-84809

No comments yet

Leave a comment