Advisories for Pypi/Cai-Framework package

The CAI (Cybersecurity AI) framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via subprocess.Popen() with shell=True, allowing attackers to execute arbitrary commands on the host system.

A command injection vulnerability is present in the function tool run_ssh_command_with_credentials() available to AI agents.