17 CVEs across 12 AI agent frameworks — one disclosure wave, same three design failures.
6× CVSS 9.8 unauthenticated RCE: Piflow: POST /chat → exec_shell, no auth Langchain-Chatchat:...
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.