3 matches found
CVE-2026-6942
radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2cmdstr. Attackers can inject shell metacharacters throu...
9.8CVSS6.8AI score0.0192EPSS
SaveExploits1References1
CVE-2026-6942
Radare2-MCP
9.8CVSS6.8AI score0.0192EPSS
SaveExploits1References3Affected Software1
CVE-2026-6942 radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass
radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2cmdstr. Attackers can inject shell metacharacters throu...
9.3CVSS8AI score
SaveExploits0References5
20