CVE-2026-68502

{
  "id": "CVE-2026-68502",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-30T21:18:13.317",
  "lastModified": "2026-10-23T22:10:00.160",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get('value') to LazyOwnShell.one_cmd, reaching LazyOwnShell.do_cmd and subprocess.call(command, shell=True), allowing unauthenticated remote code execution in the C2 process. This issue is fixed in 0.2.154."
    },
    {
      "lang": "es",
      "value": "LazyOwn RedTeam/APT Framework es un framework de C2 y operaciones de equipo rojo impulsado por IA. Antes de la versión 0.2.154, el archivo lazyc2.py de LazyOwn registra un gestor de eventos de entrada de Socket.IO no autenticado que despacha data.get(’value’) a LazyOwnShell.one_cmd, llegando a LazyOwnShell.do_cmd y subprocess.call(command, shell=True), permitiendo la ejecución remota de código no autenticada en el proceso C2. Este problema está solucionado en la versión 0.2.154."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "grisuno",
          "product": "LazyOwn",
          "versions": [
            {
              "version": "< 0.2.154",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-31T14:07:18.664082Z",
          "id": "CVE-2026-68502",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/grisuno/LazyOwn/commit/2e1e3a7b5da8149ae28a970b5883aefa42921652",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/grisuno/LazyOwn/releases/tag/release/0.2.154",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/grisuno/LazyOwn/security/advisories/GHSA-fr84-8cfg-59w4",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}