CVE-2026-30618

xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution handling. A remote attacker can access the publicly exposed MCP management interface and configure an MCP STDIO server with attacker-controlled commands and parameters, resulti...

PT-2026-49607

Name of the Vulnerable Software and Affected Versions LangBot versions 4.10.7 and earlier Description Authenticated users can execute arbitrary commands on the server with the privileges of the LangBot service due to an inadequate authorization boundary when adding or changing an STDIO MCP server...

Jaaz 安全漏洞

Jaaz is an AI-driven multi-modal creative design platform developed by 11cafe. Version 1.0.30 of Jaaz contains a security vulnerability, which stems from improper handling of MCP STDIO command execution. This vulnerability could allow remote attackers to execute arbitrary commands...