{"uuid": "dbb44a7b-d600-44ad-b86c-864548682ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7q37-2wfw-xrx7", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117357915504714748", "content": "Go hack some AI SOC shit.\nhttps://github.com/beenuar/AiSOC/security/advisories/GHSA-7q37-2wfw-xrx7\n\nThree functions in services/actions build CrowdStrike Real-Time Response (RTR) command strings by string interpolation, with no escaping, from caller-supplied parameters. The resulting command string is sent to the CrowdStrike Falcon agent and executed on the target endpoint as the EDR agent's privilege (SYSTEM/root).", "creation_timestamp": "2026-09-30T03:41:19.319200Z"}