Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:39 p.m.•21 views

CVE-2026-7211

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcpserver.py of the component Git Search API. Executing a manipulation of the argument repourl/pattern can lead to command injection. The attack can be executed remotel...

7.5CVSS6.9AI score0.0206EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/28 1:00 a.m.•37 views

CVE-2026-7211

CVE-2026-7211 affects the dvladimirov MCP project (up to version 0.1.0) with a vulnerability in the Git Search API. The flaw is exposed in the function GitSearchRequest within mcp_server.py, where manipulating the argument repo_url/pattern can trigger a command injection. The issue is exploitable...

7.5CVSS6.7AI score0.0206EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/28 1:00 a.m.•19 views

EUVD-2026-25964

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcpserver.py of the component Git Search API. Executing a manipulation of the argument repourl/pattern can lead to command injection. The attack can be executed remotel...

7.5CVSS7.2AI score0.0206EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/28 1:00 a.m.•8 views

CVE-2026-7211 dvladimirov MCP Git Search API mcp_server.py GitSearchRequest command injection

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcpserver.py of the component Git Search API. Executing a manipulation of the argument repourl/pattern can lead to command injection. The attack can be executed remotel...

7.5CVSS6.7AI score0.0206EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•3 views

CVE-2026-7211: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcpserver.py of the component Git Search API. Executing a manipulation of the argument repourl/pattern can lead to command injection. The attack can be executed remotel...

7.5CVSS6.8AI score0.0206EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•25 views

MCP Server with OpenAI, Git, Filesystem, and Prometheus Integration 注入漏洞

MCP Server with OpenAI, Git, Filesystem, and Prometheus Integration is an integrated model control plane server developed by DVladimirov, which integrates OpenAI, Git, a file system, and Prometheus. Versions of MCP Server with OpenAI, Git, Filesystem, and Prometheus Integration prior to 0.1.0 hav...

7.5CVSS7.2AI score0.0206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•15 views

PT-2026-35576

Name of the Vulnerable Software and Affected Versions dvladimirov MCP versions prior to 0.1.1 Description A command injection flaw exists in the Git Search API component within the GitSearchRequest function of the mcp server.py file. A remote attacker can execute this by manipulating the repo url...

7.5CVSS7.2AI score0.0206EPSS
SaveExploits0References10
Rows per page
Query Builder