Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Executing a manipulation of the argument Message can lead to os command injection. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
CVE-2026-3964 A weakness has been identified in OpenAkita up to 1.24.3. This impacts the function run of the file src/openakita/tools/shell.py of the component Chat API Endpoint. Exe… https://www.cve.org/CVERecord?id=CVE-2026-3964
Post summary
The advisory notes a weakness in OpenAkita's Chat API Endpoint affecting the run function in shell.py, but offers no deeper technical details or mitigation information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3964 - OpenAkita Chat API Endpoint http://shell.py run os command injection Intel Report: https://ift.tt/vWPstpb
Post summary
The post announces CVE‑2026‑3964, cites an endpoint that likely hosts a proof‑of‑concept for OS command injection, but offers no active exploitation evidence, patches, or detailed exploit code.