CVE-2026-30303 - Vulnerability Analysis

Overview

Axon Code contains an OS command injection caused by improper command parsing on Windows in the auto-approval module, letting attackers execute arbitrary commands remotely, exploit requires crafted command input.

Severity & Score

Impact

Attackers can execute arbitrary commands remotely, potentially leading to full system compromise.

Mitigation

Update to the latest version with fixed command parsing or apply patches addressing Windows CMD escape sequence handling.

References

• https://www.matterai.so/
• https://github.com/Secsys-FDU/LLM-Tool-Calling-CVEs/issues/6

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 27, 2026

🔴 CVE-2026-30303 - Critical (9.8) The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective. The vulnerability stems from the incorrect use of an incompatible command parser (the Unix-based ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30303/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner