A vulnerability was found in danielmiessler Personal_AI_Infrastructure up to 2.3.0 and classified as critical. Affected is an unknown function of the file Skills/Parser/Tools/parse_url.ts. Executing a manipulation can lead to os command injection.
The identification of this vulnerability is CVE-2026-6141. The attack may be launched remotely. Furthermore, there is an exploit available.
It is advisable to implement a patch to correct this issue.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
