A vulnerability, tracked as CVE-2026-67547, was discovered in the self-hosted AI agent OS taOS. In versions prior to 1.0.0-beta.23, the taOS API endpoint for executing built-in skills did not perform sufficient access controls, allowing any authenticated non-admin user to execute arbitrary Python code on the host system. This vulnerability enabled remote code execution without requiring admin privileges. The issue was addressed in version 1.0.0-beta.23.