1 matches found
CVE-2026-0755: Improper Neutralization of Special Elements used in an OS Command
gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of gemini-mcp-tool. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
9.8CVSS8.9AI score0.03471EPSS
SaveExploits0References1
20