{"vulnerability": "cve-2026-102911", "sightings": [{"uuid": "307ecdd3-22ed-42d7-a429-3b0bf552b683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102911", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117358108618797914", "content": "CVE-2026-102911: zosmaai pi-llm-wiki (v0.11.0 \u2013 0.11.7) suffers CRITICAL OS command injection in mcp/index.ts. Public exploit available \u2014 remote code execution possible. Upgrade to 0.11.8 ASAP. https://radar.offseq.com/threat/cve-2026-102911-os-command-injection-in-zosmaai-pi-llm-wiki-28aaee951c4eb21f #OffSeq #CVE2026102911 #Vuln #Infosec", "creation_timestamp": "2026-09-30T04:30:25.007619Z"}, {"uuid": "45c1d565-6f41-4824-8453-8ee69082a119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102911", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwpj33jn322v", "content": "CRITICAL OS command injection in zosmaai pi-llm-wiki (0.11.0 \u2013 0.11.7). Public exploit out \u2014 upgrade to 0.11.8 now to block remote control risk. https://radar.offseq.com/threat/cve-2026-102911-os-command-injection-in-zosmaai-pi-llm-wiki-28aaee951c4eb21f #OffSeq #CVE2026102911 #Security", "creation_timestamp": "2026-09-30T04:30:27.161264Z"}, {"uuid": "26767a18-69c8-4259-a378-96611930f490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102911", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwpmhtmlik27", "content": "\ud83d\udd34 CVE-2026-102911 - Critical (9.9)\n\nA flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-102911/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-30T05:31:16.511740Z"}, {"uuid": "3dbf54ec-a4f0-47f5-97dc-dbae90bfa716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g3g37yd3m2aln", "content": "CVE-2026-102911 - zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection\nCVE ID : CVE-2026-102911\n \n Published : Sept. 30, 2026, 4:18 a.m. | 41\u00a0minutes ago\n \n Description : A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknow...", "creation_timestamp": "2026-09-30T05:34:48.791734Z"}, {"uuid": "02974513-0705-4fd9-a5d4-6cc92181f127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102911", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwqusfrbvs2x", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-102911: A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7\nCVSS 9.9 \u00b7 EPSS 1.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-102911\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-30T17:33:00.426574Z"}]}