CVE-2026-76993
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized.
Risk Assessment
The risk is the possibility of remote execution of unauthorized operations in the system, which may lead to data integrity compromise or application takeover. The publicly available exploit increases the risk of attack.
Recommendation
It is recommended to immediately update PentestGPT to the latest version if available, and monitor systems for attempts to exploit this vulnerability. Also restrict access to the Web-Page Crawling component.
Other vulnerabilities in PentestGPT
Original NVD description (English source)
A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized. The reported GitHub issue was closed with the label "not planned".