What’s Vulnerable › Vulnerabilities
CVE-2025-68952: 1-click Remote Code Execution (RCE) vulnerability in Eigent
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-27 · updated 2026-10-13
- Weakness: CWE-94
Description
Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction (1-click). This issue has been patched in version 0.0.61.
Affected products
- eigent-ai eigent: 0.0.60
References
Get alerted when CVE-2025-68952 or the next vulnerability affects your stack