一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月2日

CVE-2026-51881 – deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot Web

未分类
📑 文章目录

deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool layer to execute reviewer-chosen shell commands in the service environment.