CVE-2026-2131

CVE-2026-2131 affects XixianLiang HarmonyOS-mcp-server 0.1.0, specifically the input_text function. The vulnerability allows remote OS command injection due to manipulation of the text argument. Exploitation is described as remote with a publicly available exploit. Documented impact includes pote...

CVE-2026-2131

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...