Is CVE-2025-67511 in the CISA KEV catalog?

No. CVE-2025-67511 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2025-67511?

CVE-2025-67511 has a CVSS v3 base score of 9.6 (CRITICAL).

What is the EPSS score for CVE-2025-67511?

CVE-2025-67511 has an EPSS score of 1.80% (76th percentile), estimating the probability of exploitation in the next 30 days.

CVE & CISA-KEV Catalog

CVE-2025-67511

CRITICALEPSS 76th pctl

9.6

CVSS v3

NVD

Description

Cybersecurity AI (CAI) is an open-source framework for building and deploying AI-powered offensive and defensive automation. Versions 0.5.9 and below are vulnerable to Command Injection through the run_ssh_command_with_credentials() function, which is available to AI agents. Only password and command inputs are escaped in run_ssh_command_with_credentials to prevent shell injection; while username, host and port values are injectable. This issue does not have a fix at the time of publication.

CWE-77Command Injection

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionRequired

ScopeChanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploit Intelligence

1.80%probability of exploitation in 30 days

76thpercentile

Elevated risk: more likely to be exploited than 76% of all known CVEs.

References

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-03-17.