AIKIDO-2026-11020

TL;DR

A vulnerability in command-safety classification and local WebSocket handling could allow unintended code execution or unauthorized local connections under specific conditions. On macOS/Linux, PowerShell-looking commands were incorrectly routed through the Windows PowerShell parser, which could execute a repository-controlled pwsh binary during safety validation, before the normal sandboxed execution path. An attacker might exploit this by placing a malicious pwsh executable in a controlled path and tricking the system into classifying it as safe, or by initiating browser-originated requests to the local exec-server WebSocket listener to reach functionality that should only be accessible to trusted local clients.