-= Per source details. Do not edit below this line.=-
runtime/local_agent.py opens a Socket.IO client connection to a hardcoded server at https://app.cyberrant.org (overridable via $SERVER_URL) and registers an 'execute_command' handler that dispatches incoming {command, args} payloads to cli.task_executor.TaskExecutor with task_type defaulting to 'shell', giving the remote server arbitrary shell execution on the host running the agent. runtime/cli/web_connector.py enrolls the CLI itself against CYBERRANT_WS_URL (default https://api.cyberrant.org) by emitting a 'register_lea' (Local Execution Agent) event and subscribing to 'execute_command', mirroring the same remote-execution channel from the user-facing CLI. Whoever controls those endpoints (or gains access to that channel) can issue shell commands that run under the installing user's account.
1.0.15Exploitability
AV:NAC:LPR:NUI:NScope
S:CImpact
C:HI:HA:H10.0/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H