Qingteng Security Toolbox CVE-2026-105044

Requires authenticated access as a console administrator to the Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 management console; the attacker then injects OS commands through the Security Toolbox feature, which are relayed to and executed on attached/managed client endpoints. Limiting factors: administrative console privileges are required (per the description), the CVSS vector indicates adjacent-network rather than Internet-wide reachability (AV:A), and the issue is fixed in Security Toolbox build 20260929. Note the input CVSS vector lists PR:N, contradicting the description's authenticated-administrator requirement - the description's privileged prerequisite is the more conservative and likely-correct constraint for defenders.

This is CWE-78 OS command injection in the Security Toolbox component of Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0, carrying a vendor CVSS 4.0 base score of 8.5 (High). A critical conflict exists in the input: the CVSS 4.0 vector asserts PR:N (no privileges required), yet the description explicitly states the flaw requires 'an authenticated console administrator' - these directly contradict, and the description-based prerequisite (privileged administrator) should be treated as authoritative, meaning the practical privilege barrier is much higher than PR:N implies and the true severity is lower than 8.5 suggests. The vector is AV:A (adjacent network), not fully remote/Internet-facing, further constraining reach to the management/console network. No EPSS score, no CISA KEV listing, and no public POC were provided, so there is no public exploit identified at time of analysis and no evidence of active exploitation. Net assessment: this is a real but operator-dependent abuse-of-trust issue (a privileged console admin pivoting to arbitrary code execution on managed clients) rather than a mass-exploitable, Internet-reachable emergency - prioritize patching but it does not warrant drop-everything urgency, and the PR:N/description-authentication discrepancy should be verified with the vendor/Mandiant advisory.

A user with authenticated console-administrator access to the Qingteng Host Adaptive Security Platform management console abuses the Security Toolbox feature, injecting OS command metacharacters into a field that is passed unsanitized to a shell. The injected commands execute on attached/managed client endpoints, letting the attacker run arbitrary code across the fleet of monitored hosts. No public exploit code was identified, so exploitation currently requires an insider or a compromised administrator credential plus adjacent-network access to the console.