Skip to content
OpenAdvisories

Product · TaklaXBR

zai-shell

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-25807

    Unauthenticated Remote Code Execution via P2P Sharing in ZAI-Shell

    ZAI Shell is an autonomous SysOps agent designed to navigate, repair, and secure complex environments. Prior to 9.0.3, the P2P terminal sharing feature (share start) opens a TCP socket on port 5757 without any authentication mechanism. Any remote attacker can…

    TaklaXBR zai-shell