8.1 High

Ajenti has potential Remote Code Execution

CVE-2026-27975

Impact An unauthenticated user could gain access to a server to execute arbitrary code on this server. Patches This is fixed in the version 2.2.13. Users should upgrade to this version as soon as possible.

Assessment

CVSS: 8.1 (v4.0)
Severity: High
EPSS: 0.00588% chance of exploitation in the next 30 days
Known exploited: Not listed in CISA KEV
Exploit availability: Nothing found in Exploit-DB, Metasploit, Nuclei or public PoC repositories
Published: 27 October 2026
Last updated: 27 October 2026
Affected: pip · aj
Weakness: CWE-284

CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

At the source

GitHub Advisories

References

https://github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444
https://nvd.nist.gov/vuln/detail/CVE-2026-27975
https://github.com/ajenti/ajenti/releases/tag/v2.2.13
https://github.com/advisories/GHSA-vcw3-r3fx-j444

Query this programmatically

Agents can read this through the MCP endpoint, or over HTTP:

curl https://cve.zerocrew.in/api/cve/CVE-2026-27975