CVE-2026-75130

Context7 through 2.1.2 has a prompt injection flaw in its Custom AI Instructions feature served via the MCP server. Attackers poison unsanitized instructions to exfiltrate credentials from environment files and delete files on victim machines when the agent makes routine documentation requests. C...