Repository navigation
Security: guilt/TinyToT
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Unauthenticated remote code execution via POST /api/agent/tool and /api/agent (shell_run, shell=True)GHSA-2f6r-9rrh-wvq9 published
Nov 8, 2026 by guiltCritical
Learn more about advisories related to guilt/TinyToT in the GitHub Advisory Database