PT-2026-69194

Name of the Vulnerable Software and Affected Versions MIMICLab mcp-pdf-vision version 1.1.0 Description Command injection is possible through the manipulation of the pdfPath or sessionId arguments within the load pdf function located in the src/index.ts file. This issue allows an attacker to...

CVE-2026-19279: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function loadpdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was inform...