What is the CVSS score of CVE-2025-68952?

CVE-2025-68952 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.6%.

How to fix or mitigate CVE-2025-68952?

Within 24 hours, identify every host and server running Eigent (focusing on any instance at or near version 0.0.60), confirm the installed version, and upgrade to the fixed version 0.0.61 referenced in the advisory; if 0.0.61 cannot be obtained from the vendor or a trusted distribution channel because the structured patch data reports no patch, treat those instances as unpatched, remove or isolate them from production use, and restrict them to non-sensitive, non-networked workflows. Within 7 days, notify affected users that the flaw is triggered by a single interaction with attacker-supplied content, so they must not open untrusted links, files, or agent prompts on machines running Eigent; add detection for unexpected child processes, shell spawns, or outbound connections originating from Eigent; and review endpoint and egress logs for any signs of anomalous execution on those assets. Within 30 days, either complete the migration to 0.0.61 (or a later release confirmed by the vendor) across all inventoried instances, or formally decommission the product; re-verify version state via automated software inventory, confirm the fix is enforced by policy so downgrades are blocked, and validate that monitoring coverage for the Eigent process remains in place after remediation.

Eigent CVE-2025-68952

CRITICAL

Code Injection (CWE-94)

2025-12-27 security-advisories@github.com

RCE Code Injection Eigent

9.3

CVSS 4.0 · Vendor: github

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Lure victim with crafted link/payload
Delivery

Victim performs single click in Eigent
Exploit

Injected code executes (CWE-94)
Execution

Arbitrary code runs on host
Impact

Full compromise of machine/server

Vulnerability Assessment

Weakness	CWE CWE-94 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V1 - Encoding and Sanitization Code injection prevention, sandbox exec MITRE ATT&CK 2 techniques across 2 tactics: Execution, Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Exploitation requires a victim running Eigent version 0.0.60 to perform a single interaction ('1-click') with attacker-supplied content within the application - the description does not name the exact feature, protocol, or configuration setting involved, so the precise clickable vector is not specified in available data. The limiting factor is this mandatory user interaction: despite the vector's UI:N claim, the '1-click' framing means the attack cannot succeed fully unattended and depends on social engineering to get a user to act. Versions 0.0.61 and later are patched and not affected.
Impact	Signals are mixed and point to a serious-but-not-yet-widely-exploited issue. The vendor-supplied CVSS 4.0 vector scores 9.3 (AV:N/AC:L/PR:N/UI:N) and CWE-94 (code injection) with high confidentiality, integrity, and availability impact on the vulnerable system, which frames this as critical arbitrary code execution. However, there is a direct conflict: the CVSS vector asserts UI:N (no user interaction) while the description explicitly characterizes this as a '1-click' RCE, which inherently requires a victim to perform a single interaction - the vector appears to understate the user-interaction requirement and should read UI:A/UI:R; verify with the GitHub advisory. Counterbalancing the high CVSS, the EPSS probability is low (0.57%, 45th percentile), there is no CISA KEV listing and no public exploit identified at time of analysis, indicating no evidence of active or imminent mass exploitation. SSVC-style reading: technical impact is total, but exploitation is not automatable (requires luring a user to click), and exploitation status is 'none observed.' Net assessment: this is a genuinely high-severity flaw worth prompt patching for Eigent 0.0.60 users, but real-world urgency is tempered by the required user interaction and the product's limited deployment footprint rather than being an actively-exploited emergency.
Exploit ScenarioDerived	An attacker crafts a malicious link, workflow, agent configuration, or document and lures an Eigent 0.0.60 user into a single interaction (one click) within the application. That one click triggers injection and execution of attacker-controlled code (CWE-94) on the victim's machine or server, yielding full compromise of confidentiality, integrity, and availability. No public exploit code has been identified at time of analysis.

Act Now Prioritize within 24-48h. Why: CRITICAL severity.

No patch listed yet 0.6% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Oct 13, 2026

Code injection in Eigent version 0.0.60 allows unauthenticated remote attackers to execute arbitrary code on the victim's machine or server, but the attack requires the victim to perform a single interaction ('1-click') with attacker-supplied content. The vulnerability is patched in version 0.0.61. No public exploit code or active exploitation has been identified at time of analysis; the EPSS score is 0.57% (45th percentile), indicating a low likelihood of exploitation in the wild.

RemediationAI

Upgrade to Eigent version 0.0.61 or later. This is the vendor-released patch that addresses the vulnerability. The advisory is at https://github.com/eigent-ai/eigent/security/advisories/GHSA-pwcx-28p4-rmq4. If immediate upgrade is not possible, restrict interaction with untrusted content and avoid clicking links or opening files from unknown sources within Eigent, though this is not a reliable substitute for patching. No other specific workarounds are documented.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The vulnerability is a code injection (CWE-94) in Eigent, a multi-agent workforce application. The affected product is identified by CPE cpe:2.3:a:eigent:eigent:0.0.60. The root cause is insufficient validation or sanitization of user-supplied input that is subsequently executed as code. The official CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) suggests no user interaction is needed, but the vulnerability description and independent assessment indicate a mandatory '1-click' interaction, meaning exploitation depends on a victim clicking attacker-supplied content within the application. The specific feature or protocol involved is not named in available data. Versions 0.0.61 and later are patched.

Know when Eigent gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (github) PRIMARY 9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

vuln.today AI 8.8 HIGH

Network-reachable code injection (CWE-94) with low complexity and no privileges, but the '1-click' description mandates UI:R; total host compromise gives C:H/I:H/A:H, scope unchanged.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (github).

CVSS VectorVendor: github

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

None

User Interaction

None

Vulnerable system: Confidentiality

High

Vulnerable system: Integrity

High

Vulnerable system: Availability

High

Subsequent system: Confidentiality

None

Subsequent system: Integrity

None

Subsequent system: Availability

None

DescriptionCVE.org

Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction (1-click). This issue has been patched in version 0.0.61.

Executive ViewAI

Why It Matters

Eigent 0.0.60, an AI agent tool that runs with the privileges of the user or server hosting it, contains a critical code-injection flaw (CVSS 9.3) that a remote attacker can trigger if a user performs a single click on attacker-supplied content, potentially yielding arbitrary code execution and full control of that machine. Because Eigent typically sits on developer and analyst endpoints and on servers with reach into source code, credentials, and internal systems, a compromised instance could become a foothold for broader lateral movement. No public exploit code or active exploitation has been identified at time of analysis and the EPSS score is low (0.6%, 45th percentile), so this is a preparedness and remediation priority rather than a live incident; leadership should care because the affected population is exactly the workforce holding privileged access.

Business Impact: High

Compensating Controls

Vendor-released patch: 0.0.61 (per advisory description; the structured patch field reports no patch, so confirm availability with the vendor). Apply vendor patch. If the fixed version cannot be deployed, interim mitigations are: restrict Eigent to non-sensitive, non-networked hosts; block or tightly control outbound network access from Eigent processes; prohibit users from opening untrusted links, files, or agent prompts while Eigent is running; and monitor those hosts for unexpected child processes, shell execution, or suspicious egress until the upgrade is complete. Note: no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.

Threat Intelligence Overview

EPSS Score

0.6%

Top 55% exploitable

Prevalence

Low

niche open-source multi-agent framework, limited production deployment footprint

Data Quality

4 sources

Confidence: Medium

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC No

EPSS 0.6%

Patch available No

Active threat No

Deciding rule

CRITICAL severity

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

None

System Exposure· derived

Open

Automatable· derived

Yes

Human Impact

High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +1

CVSS: +46

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Code Injection CRITICAL

Code injection occurs when an application accepts user input and passes it directly into a language interpreter or evaluator without proper sanitization.

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.