CVE-2025-68952

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction (1-click). This issue has been patched in version 0.0.61.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security-advisories@github.com

Published

2025-12-27

Last modified

2026-10-13

Weaknesses

CWE-94

Affected products

• Eigent (Eigent)
• Eigent (Eigent-ai)

References

• https://github.com/eigent-ai/eigent/security/advisories/GHSA-pwcx-28p4-rmq4