Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Authenticated users can inject single quotes into file_path, path, script_name, or script_args parameters to break out of quoted arguments and execute arbitrary commands on managed endpoints with SYSTEM or root privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔐 AiSOC Mass Disclosure — 5 CVEs Expose SOC Platform's Own Tools as Attack Vector Five vulnerabilities in AiSOC, the open-source security operations platform SOC tools weaponized against managed endpoints. 🔗 https://threataft.com/articles/aisoc-mass-disclosure-cve-2026-103056-103055-103054-103053-103057?utm_source=twitter&utm_medium=social&utm_campaign=share #CyberSecurity #ThreatIntel #AiSOC #CVE