Executive brief
FishCodeTech Muteki is an autonomous AI agent framework used for CTF (Capture The Flag) problem-solving. A flaw in the configuration handling allows remote attackers to inject and execute arbitrary operating system commands, potentially leading to complete system compromise or unauthorized access to sensitive data.
Technical details
The vulnerability is an OS command injection flaw affecting FishCodeTech Muteki up to version 0.2.5, located in the handling of the .claude/settings.json configuration file within the Default Local Worker Backend component. The injection occurs through an unknown function that fails to properly sanitize or validate user-controlled input before passing it to system command execution routines. The attack is network-accessible without requiring prior authentication. An attacker can execute arbitrary OS commands with the privileges of the application process, potentially leading to data theft, lateral movement, or system takeover. The project has been announced for shutdown and refactoring, with no patch expected.
Affected products
- FishCodeTech Muteki up to 0.2.5
Timeline
- 2026-07-12: disclosed: Issue #7 opened on GitHub
- 2026-08-25: advisory: CVE-2026-79623 published