A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection.
The attack can be executed remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult.
The exploit has been publicly disclosed and may be utilized. The reported GitHub issue was closed with the label "not planned".
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 7
https://github.com/GreyDGL/PentestGPT/
cna@vuldb.com
https://github.com/GreyDGL/PentestGPT/issues/484
cna@vuldb.com
https://github.com/ez-lbz/pentestgpt-vul-report
cna@vuldb.com
https://vuldb.com/cve/CVE-2026-76993
cna@vuldb.com
https://vuldb.com/submit/880116
cna@vuldb.com
https://vuldb.com/vuln/393617
cna@vuldb.com
https://vuldb.com/vuln/393617/cti
cna@vuldb.com