critical9.8
CVE-2026-49188
The ai_cmd utility executes with full root permissions.
Impact
The ai_cmd utility executes with full root permissions. It pipes socket inputs directly to popen(), paving the way for unauthenticated users to execute arbitrary root commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acer | Connect M6e 5g Firmware | through m6e_ai_1.00.000019 |