Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/06 12:30 a.m.20 views

GHSA-XQV9-QR76-HFQ2 @elgentos/magento2-dev-mcp vulnerable to command injection

A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMagerun2Command of the file src/index.ts. Such manipulation leads to os command injection. An attack has to be approached locally. The exploit is publicly available and might be...

5.3CVSS5.6AI score0.00812EPSS
SaveExploits0References9
Rows per page
Query Builder