{"vulnerability": "CVE-2026-37751", "sightings": [{"uuid": "807a1b4a-44a9-470f-8bc4-535bd60ac0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-37751", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu76m2xduy2f", "content": "CVE-2026-37751\nThe ai\u2011maestro software version 0.24.17 contains a flaw in a function that handles session termination. An attacker who can send specially crafted data could cause the system to run any operating\u2011system command\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T05:50:06.008204Z"}, {"uuid": "8999ede8-1fda-4e3a-be3f-c031e0f852b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-37751", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mudw2ymnqz27", "content": "\ud83d\udd34 CVE-2026-37751 - Critical (9.8)\n\nAn OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 2...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-37751/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-31T03:00:42.820159Z"}, {"uuid": "e4f5535f-ec3f-4fe3-a2c7-1055de785e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-37751", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mudyy3pjsg2r", "content": "Critical Command Injection, Lazy Defenders, and the Usual Pretend Surprise\nPANIC 92% | Lag 0.0h | CVE-2026-37751 is a critical OS command injection in killSessionSync within 2's agent runtime, and i\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-31T03:52:45.775539Z"}]}