CVE-2026-93965 aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1. Affected is the function subprocess.Popen of the file backend/aiops/services.py of the component MCP STDIO Server Management. This manipulation of the argument endpointorcommand causes command injection. The attack may be initiated remotely...