An unauthenticated remote code injection vulnerability in TaklaXBR ZAI Shell allows attackers to execute arbitrary commands if a user interacts with a malicious P2P session.

The vulnerability exists because the P2P terminal sharing feature opens a TCP socket on port 5757 without authentication. An unauthenticated remote attacker can connect to this socket and send arbitrary commands that execute with user privileges if the host user inadvertently approves the request.

Successful exploitation allows a remote attacker to achieve full system command execution on the host machine. Given the CVSS score of 8.8, this represents a high risk to organizational security, as it could lead to complete system compromise, unauthorized data access, and lateral movement within the network.

Immediate Action: Update TaklaXBR ZAI Shell to version 9.0.3 or later immediately to apply the necessary authentication requirements for P2P sessions.

Proactive Monitoring: Monitor network traffic for unauthorized connections to TCP port 5757 and review system logs for unexpected command executions or shell activity.

Compensating Controls: Implement network segmentation or firewall rules to restrict access to port 5757 to trusted internal IP addresses only, effectively mitigating the risk of external unauthorized connections.

Public Exploit Available: Yes, a public proof-of-concept repository exists on GitHub (ibrahmsql/CVE-2026-25807-Exploit).

This vulnerability presents a significant risk to any environment deploying ZAI Shell due to the lack of authentication on a sensitive network port. Security teams must prioritize updating to version 9.0.3 to remove the insecure socket exposure. Until the update is applied, ensure that no ZAI Shell instances are directly exposed to the internet.