Executive brief
SxDevOps is an open-source intelligent operations agent platform used for observability, event management, and workflow automation in production environments. A command injection vulnerability in the MCP STDIO Server Management component allows remote attackers to execute arbitrary system commands via a maliciously crafted endpoint parameter, potentially leading to complete system compromise.
Technical details
The vulnerability exists in the subprocess.Popen function call within backend/aiops/services.py, where the endpoint_or_command argument is not properly sanitized before execution. This allows an attacker to inject shell commands remotely without requiring authentication. The vendor has released a patch (commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9) to harden security controls and mitigate the issue.
Affected products
- aiyiyi121 SxDevOps 1.0, 1.1
Timeline
- 2026-09-20: disclosed
- 2026-09-06: patched