CVE-2025-68952 1-click Remote Code Execution (RCE) vulnerability in Eigent
An attacker can execute arbitrary code on the victim's machine via a single click in Eigent, requiring an upgrade to the patched version.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-68952?
CVE-2025-68952 is a critical code injection vulnerability in eigent-ai eigent, published on 27 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Eigent is a multi-agent Workforce. In version 0.0.60, a 1-click Remote Code Execution (RCE) vulnerability has been identified in Eigent. This vulnerability allows an attacker to execute arbitrary code on the victim's machine or server through a specific interaction (1-click). This issue has been patched in version 0.0.61.
Weakness: CWE-94
Which versions are affected by CVE-2025-68952?
It affects 1 product.
Products include Eigent Eigent.
How do I fix CVE-2025-68952?
No fix has been published for CVE-2025-68952 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-68952 being exploited?
There is no known exploitation of CVE-2025-68952 in the wild and no public exploit code.
Other vulnerabilities in eigent-ai eigent
Sources
Also known as GHSA-pwcx-28p4-rmq4.