CVE-2025-68952: 
Homebrew vulnerability analysis and mitigation

CVE-2025-68952 is a 1-click Remote Code Execution (RCE) vulnerability in Eigent, a multi-agent AI workforce platform. The vulnerability affects version 0.0.60 and was disclosed on December 26–27, 2025, by researcher Wendong-Fan via a GitHub Security Advisory. It allows an attacker to execute arbitrary code on a victim's machine or server through a single user interaction. The issue was patched in version 0.0.61. It carries a CVSS v3.1 base score of 9.8 (Critical) and a CVSS v4.0 base score of 9.3 (Critical) (GitHub Advisory, Red Hat CVE).

The vulnerability is classified as CWE-94 (Improper Control of Generation of Code / Code Injection), meaning Eigent fails to properly sanitize or restrict user-controlled input that is subsequently used in code generation or execution contexts (GitHub Advisory). The attack vector is network-based, requires no authentication and no privileges, and is triggered through a single user interaction ("1-click"), such as opening a malicious link or file within the Eigent environment. The advisory notes the vulnerability "potentially allows dangerous operations" but does not publicly disclose the specific endpoint or payload mechanism, and no public proof-of-concept code has been identified (GitHub Advisory).

Successful exploitation results in complete system compromise, with high impacts to confidentiality, integrity, and availability. An attacker can execute arbitrary code as the Eigent process on the victim's machine or server, potentially enabling data theft, persistent access, system modification, denial of service, or lateral movement within the network. Given that Eigent operates as a multi-agent AI workforce platform, compromise could also expose sensitive AI workflows, credentials, and connected system integrations (GitHub Advisory, Red Hat CVE).

As of the time of disclosure, there is no public proof-of-concept exploit and no confirmed evidence of in-the-wild exploitation (Red Hat CVE). The EPSS score is approximately 0.43%, indicating a low current probability of exploitation in the wild. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported. Despite the low EPSS, the critical CVSS scores and the ease of exploitation (no authentication, single interaction) make this a high-priority patching target.

The primary remediation is to upgrade Eigent from version 0.0.60 to version 0.0.61 or later, which contains the official patch (GitHub Advisory). If immediate patching is not possible, restrict network access to Eigent instances to trusted users and systems only. Monitor for suspicious or unauthorized code execution activity on systems running Eigent 0.0.60.

The vulnerability received automated coverage from vulnerability tracking services including CIRCL, Vulners, CVEFeed, and Tenable shortly after disclosure (Red Hat CVE). A brief write-up was published by Infinit Security (Infinit Security), and the CVE was noted on social platforms including Bluesky and Mastodon/infosec.exchange. No significant vendor statements beyond the GitHub advisory or notable independent researcher commentary have been identified.