8.4
High
CVE-2026-19136 A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed…
Description
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tianxi AI Agent PC Application 4.2 | earliest → < 4.2.1.8111 | 4.2.1.8111 |