Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:50 p.m.•23 views

CVE-2026-7730

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function childprocess.spawn of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit...

6.5CVSS6.3AI score0.01817EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/04 4:00 a.m.•59 views

CVE-2026-7730 privsim mcp-test-runner MCP index.ts child_process.spawn os command injection

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function childprocess.spawn of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit...

6.5CVSS0.01817EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/05/04 4:00 a.m.•11 views

CVE-2026-7730

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function childprocess.spawn of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit...

6.5CVSS6.3AI score0.01817EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2026/05/04 4:00 a.m.•47 views

CVE-2026-7730

CVE-2026-7730 affects privsim mcp-test-runner 0.2.0. The vulnerability is in the MCP Interface’s src/index.ts where the function child_process.spawn mishandles the argument command, enabling an os command injection. Impact may be remote; exploit publicly available. Documents do not provide remedi...

6.5CVSS6.3AI score0.01817EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/04 12:00 a.m.•6 views

CVE-2026-7730: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function childprocess.spawn of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit...

6.5CVSS6.3AI score0.01817EPSS
SaveExploits0References3
Rows per page
Query Builder