What is the CVSS score of CVE-2026-36044?

CVE-2026-36044 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of @pensar/apex are affected by CVE-2026-36044?

The @pensar/apex Node.js agent package (versions 0.0.58 and earlier) contains an unauthenticated OS command injection vulnerability in the smart_enumerate tool that allows remote attackers to execute…

How to fix or mitigate CVE-2026-36044?

Within 24 hours: Conduct a complete inventory of systems and applications using @pensar/apex version 0.0.58 or earlier, and identify which are exposed to untrusted network input. Within 7 days: Determine remediation approach-either upgrade to a patched version of @pensar/apex (if released), migrate to an alternative agent package, or restrict network access to agent endpoints through segmentation and firewall rules. Within 30 days: Complete the remediation (upgrade, migration, or isolation) across all production and development environments, validate that the vulnerable smart_enumerate tool is disabled or properly sandboxed, and document the remediation decision and timeline.

@pensar/apex CVE-2026-36044

HIGH

OS Command Injection (CWE-78)

2026-05-27 cve@mitre.org

Command Injection Node.js

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 19:58 vuln.today

DescriptionCVE.org

@pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool() function in src/core/agent/tools.ts constructs a shell command by concatenating unsanitized values from the extensions array and url parameter into a string passed to Node.js child_process.exec(). Because exec() spawns a shell, shell metacharacters in those values are interpreted by the host shell, resulting in arbitrary OS command execution with the privileges of the running process.

AnalysisAI

OS command injection in the @pensar/apex Node.js agent package (versions 0.0.58 and earlier) lets a remote, unauthenticated attacker run arbitrary operating-system commands by smuggling shell metacharacters into the smart_enumerate tool's url or extensions inputs. The vulnerable createSmartEnumerateTool() routine in src/core/agent/tools.ts builds a shell command string by concatenating those untrusted values and passes it to Node.js child_process.exec(), which spawns a shell that interprets the injected characters, executing them with the privileges of the agent process. CVSS is 8.8 (network vector, low complexity, no privileges, but user/agent interaction required); the source data shows no CISA KEV listing and no EPSS score, and a referenced researcher gist may contain proof-of-concept detail though exploit code is not confirmed in the structured input.

Technical ContextAI

The flaw is a classic OS command injection (CWE-78, inferred since the CVE lists CWE as N/A) rooted in unsafe use of Node.js's child_process.exec(). Unlike execFile() or spawn() with an argument array, exec() runs its input through /bin/sh (or cmd.exe on Windows), so any shell metacharacter - ;, |, &&, $(), backticks - in the command string is interpreted rather than treated as literal data. Here, the smart_enumerate tool concatenates caller-supplied values from the extensions array and the url parameter directly into that command string with no escaping, quoting, or allow-list validation, making the shell parse attacker content as commands. @pensar/apex appears to be an AI/agent-style enumeration tool distributed via npm; no CPE strings were provided in the intelligence, so exact platform identifiers cannot be derived beyond the npm package coordinate @pensar/apex.

Affected ProductsAI

The affected product is the @pensar/apex npm package at versions 0.0.58 and earlier (<= 0.0.58), with the defect located in createSmartEnumerateTool() within src/core/agent/tools.ts. No CPE string was provided in the intelligence to pin an exact platform identifier. The package and its release history can be reviewed on npm at https://www.npmjs.com/package/@pensar/apex, and additional technical detail is referenced in a researcher gist at https://gist.github.com/NucleiAv/47e87da08b90ef464fd9b35affe578fb; no dedicated vendor security advisory URL was included in the source data.

RemediationAI

No vendor-released patch version was identified in the available data, so the primary action is to check https://www.npmjs.com/package/@pensar/apex for a release later than 0.0.58 and upgrade to it once published, since 0.0.58 and all earlier versions are vulnerable; do not assume a specific fixed version, as none is confirmed in the input. Until a fixed release is confirmed, do not pass untrusted or externally sourced values into the smart_enumerate tool's url or extensions parameters, and avoid running the agent against attacker-controllable input. The durable code-level fix (for maintainers) is to replace child_process.exec() with child_process.execFile() or spawn() using an argument array so values are never parsed by a shell; as a compensating control for operators, run the agent under a least-privilege account inside a sandbox or container with restricted filesystem and outbound network egress, accepting the trade-off that egress restrictions may break legitimate enumeration functionality that relies on outbound requests. Technical context for these steps is documented in the referenced gist at https://gist.github.com/NucleiAv/47e87da08b90ef464fd9b35affe578fb.