CoreCVE
Back

HIGH

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application

Published Sep 10, 2026

Description

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application.

Affected products

Remediation

Vendor solution

Update Tianxi AI Agent PC Application version to 4.2.1.8111 or later.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner lenovo
Published Sep 10, 2026
Updated Sep 11, 2026
Reserved Aug 6, 2026
Link CVE-2026-19136

CISA Vulnrichment

Updated Sep 11, 2026

NVD

Status Deferred
Modified Sep 11, 2026
Link CVE-2026-19136

Red Hat

No data

ENISA EUVD

Assigner lenovo
Published Sep 10, 2026
Updated Sep 11, 2026
Link EUVD-2026-75751

GitHub

No data