CVE-2026-19047: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of the component luduscliexecute. Performing a manipulation of the argument command/args results in command injection. The...

PT-2026-68616

Name of the Vulnerable Software and Affected Versions NocteDefensor LudusMCP versions prior to 1.0.25 Description Command injection is possible through the manipulation of the command and args arguments. This issue resides within the executeArbitraryCommand and executeCommand functions located in...