CVE-2026-30616

Jaaz version 1.0.30 , an AI-driven multi-modal creative design platform developed by 11cafe , is vulnerable to remote code execution (RCE) . The root cause lies in the improper handling of MCP STDIO command execution , where the application fails to properly neutralize special elements used in co...

CVE-2026-30616

Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling. A remote attacker can send crafted network requests to the network-accessible Jaaz application, causing attacker-controlled commands to be executed on the server. Successful exploitation result...