CVE-2026-10214: A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component Bash Tool. Execut...

Added to the CISA Known Exploited Vulnerabilities catalog on 01 Jun 2026. Vendor: AI/ML. Product: chatgpt. CVSS score: 7.3.

A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agent/tools/bash/bash.py of the component Bash Tool. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploi...

Required action: Review and patch if applicable to your AI infrastructure.