CyberRota Analysis
AI-GeneratedThe vulnerability affects the agentverus-scanner up to version 0.8.1, specifically in the isSecurityDefenseSkill function within context.js, where it improperly handles untrusted inputs for security decisions. This could allow a local attacker to manipulate security protocols, potentially compromising the integrity of the system. Organizations using this software should prioritize remediation to mitigate the risk of exploitation, especially if they operate in sensitive environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be initiated from a local position. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.