CVE-2026-5023

CVE-2026-5023 affects the DeDeveloper23 codebase-mcp, specifically the RepoMix Command Handler’s file src/tools/codebase.ts, with functions getCodebase, getRemoteCodebase, and saveCodebase. The underlying issue is a manipulation that enables OS command injection from local access. The description...