2 matches found
CVE-2026-6118
A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function addmcpserver of the file astrbot/dashboard/routes/tools.py of the component MCP Endpoint. This manipulation of the argument command causes command injection. The attack is possible to be carried out...
6.5CVSS0.0348EPSS
SaveExploits0References5
CVE-2026-6118: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is the function addmcpserver of the file astrbot/dashboard/routes/tools.py of the component MCP Endpoint. This manipulation of the argument command causes command injection. The attack is possible to be carried out...
6.5CVSS6.2AI score0.0348EPSS
SaveExploits0References3
20