CVE-2026-93966: SxDevOps Command Injection RCE Vulnerability

CVE-2026-93966 Overview

CVE-2026-93966 is a command injection vulnerability affecting aiyiyi121 SxDevOps versions 1.0 and 1.1. The flaw resides in the paramiko.SSHClient.exec_command function within backend/ops/host_tasks.py, part of the TASK_RUN_COMMAND component. An authenticated attacker can manipulate the command argument to inject arbitrary operating-system commands over the network. The vendor was contacted, responded professionally, and released a fixed version. The issue is tracked under CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component).

Critical Impact

Authenticated remote attackers can inject arbitrary shell commands through the SxDevOps task execution component, leading to command execution on managed hosts.

Affected Products

• aiyiyi121 SxDevOps 1.0
• aiyiyi121 SxDevOps 1.1
• Component: TASK_RUN_COMMAND in backend/ops/host_tasks.py

Discovery Timeline

• 2026-09-20 - CVE CVE-2026-93966 published to NVD
• 2026-09-21 - Last updated in NVD database
• Patch commit - 2b4bf8585c3e731e7a8af30801ea46680bc783f9 published to the SxDevOps GitHub repository

Technical Details for CVE-2026-93966

Vulnerability Analysis

The vulnerability lies in how SxDevOps constructs and dispatches remote commands to managed hosts using the Paramiko SSH library. The TASK_RUN_COMMAND handler forwards a user-controlled command argument directly into paramiko.SSHClient.exec_command. Because Paramiko executes the supplied string inside a shell on the target host, unsanitized input allows an attacker to chain additional commands using shell metacharacters such as ;, &&, |, or backticks. The flaw is exploitable remotely and requires high privileges to reach the vulnerable endpoint, limiting the pool of eligible attackers to authenticated operators.

Root Cause

The root cause is missing neutralization of shell metacharacters before the command parameter reaches exec_command. SxDevOps trusts operator-supplied task payloads and passes them through to the SSH channel without argument-list construction or shell escaping. This maps to CWE-74, where downstream interpreter behavior is influenced by upstream input.

Attack Vector

An authenticated user with permission to submit or edit host tasks crafts a payload that appends attacker-controlled commands to the intended task command. When the SxDevOps worker executes the task on a remote host, the injected commands run under the SSH session's user account. This yields command execution on every managed host reachable via the compromised task definition.

# Patch reference from commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9
# backend/aiops/serializers.py
     AIOpsSkill,
     AIOpsToolInvocation,
 )
+from .services import _validate_mcp_stdio_command
 from .services import _ensure_task_draft_title, _is_generic_task_title, get_model_provider_setup_hint

Source: GitHub Commit 2b4bf858

# backend/aiops/services.py
 from collections import Counter
 from datetime import datetime, time as datetime_time, timedelta
 from decimal import Decimal
+from pathlib import Path
 from urllib.parse import urlparse

 import requests

Source: GitHub Commit 2b4bf858. The patch introduces _validate_mcp_stdio_command and imports Path to support argument validation and safe path handling before commands reach the SSH executor.

Detection Methods for CVE-2026-93966

Indicators of Compromise

• Unexpected shell metacharacters (;, &&, |, `, $() appearing in SxDevOps task command fields or audit logs.
• SSH session logs on managed hosts showing chained commands invoked under the SxDevOps service account.
• Task execution artifacts writing to atypical paths, downloading remote payloads, or spawning shells such as bash -i.

Detection Strategies

• Inspect SxDevOps application logs for TASK_RUN_COMMAND invocations containing shell control operators.
• Correlate task submission events with auth.log and syslog entries on managed hosts to identify commands that deviate from approved runbooks.
• Alert on child processes of the SSH daemon that spawn shells, package managers, or outbound network utilities not part of standard task definitions.

Monitoring Recommendations

• Enable command auditing on all hosts managed by SxDevOps and forward logs to a central SIEM for correlation.
• Baseline the set of commands SxDevOps normally executes and alert on deviations.
• Monitor the SxDevOps GitHub repository for further security commits and issue updates.

How to Mitigate CVE-2026-93966

Immediate Actions Required

• Upgrade SxDevOps to the fixed version that includes commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9.
• Audit accounts with permission to create or modify host tasks and revoke unnecessary privileges.
• Rotate SSH credentials used by SxDevOps to reach managed hosts if abuse is suspected.

Patch Information

The vendor released a fix in commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9. The patch adds a _validate_mcp_stdio_command validator and hardens argument handling before commands are forwarded to paramiko.SSHClient.exec_command. See the GitHub issue tracker and the VulDB CVE Report for additional context.

Workarounds

• Restrict access to the SxDevOps task creation interface to a minimal set of trusted operators until patching is complete.
• Constrain the SSH user account used by SxDevOps on managed hosts via sudoers rules or a restricted shell to limit command execution scope.
• Deploy allow-list validation at a reverse proxy or web application firewall to block task payloads containing shell metacharacters.

# Example: restrict SxDevOps SSH account to a limited command set via sudoers
# /etc/sudoers.d/sxdevops
sxdevops ALL=(ALL) NOPASSWD: /usr/local/bin/sxdevops-runner
Defaults:sxdevops !shell_noargs, requiretty