CVE-2026-30303 - Vulnerability Analysis

Overview

Axon Code contains an OS command injection caused by improper command parsing on Windows in the auto-approval module, letting attackers execute arbitrary commands remotely, exploit requires crafted command input.

Severity & Score

Impact

Attackers can execute arbitrary commands remotely, potentially leading to full system compromise.

Mitigation

Update to the latest version with fixed command parsing or apply patches addressing Windows CMD escape sequence handling.

References

• https://www.matterai.so/
• https://github.com/Secsys-FDU/LLM-Tool-Calling-CVEs/issues/6

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner