CVE-2026-79622

A path traversal vulnerability was identified in dekdee/adobe-xd-mcp version 1.0.0 , specifically in the file src/parsers/xd-parser.ts within the file-access-from-request Endpoint component. A remote attacker can manipulate the outputFile/outputDir argument to traverse the file system, leading to...

PT-2026-81352

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description An OS Command Injection issue exists in the shell exec MCP tool. The software implements a secure mode that restricts command execution to an allowlist of executables defined in security.yaml, whic...

PT-2026-81391

Name of the Vulnerable Software and Affected Versions Nextcloud MCP Server versions prior to 0.117.2 Description The POST /webhooks/nextcloud endpoint lacks authentication by default because the WEBHOOK SECRET variable defaults to None and is not required during startup validation. When this secr...

PT-2026-81492

Name of the Vulnerable Software and Affected Versions Chainlit versions 2.4.0rc0 through 2.11.x Description Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the 'POST /mcp' endpoint without authentication. The ConnectSseMCPRequest and...

PT-2026-81481

Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register clients pointing to attacker-controlled hosts. Attackers can send authorization URLs to signed-in users, capture their...

PT-2026-81322

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The MCP HTTP Stream mcp post handler fails to enforce a maximum number of sessions and does not invoke the cleanup sessions function to expire old entries. Consequently, every initialize request...

PT-2026-81320

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description The MCP HTTP Stream transport in PraisonAI uses an unsafe prefix match when validating the Origin header via the validate origin method. The validation logic accepts any origin that starts with an...

PT-2026-81345

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.58 Description A Cross-Site Request Forgery CSRF issue exists in the MCP HTTP-stream transport. The validate origin function in transports/http stream.py uses a prefix match via startswith to validate the reques...

PT-2026-81459

Name of the Vulnerable Software and Affected Versions genieacs-mcp versions prior to 0.3.2 Description The Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp endpoint on the default address 127.0.0.1:8080 when the MCP AUTH TOKEN variable is unset. The server fails to...

PT-2026-81350

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description The software contains two security flaws that allow unrestricted operating system command execution. First, the security configuration is disabled by default when the MCP SHELL SEC CONFIG FILE...

PT-2026-81351

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description An OS command injection issue exists in the shell exec MCP tool. The software implements a secure mode that restricts command execution to an allowlist defined in security.yaml. However, the defaul...

PT-2026-81349

Name of the Vulnerable Software and Affected Versions QWED-MCP versions prior to 0.2.1 Description The verify math expression function in src/qwed mcp/engines/math engine.py passes the expression and claimed result strings directly to SymPy's parse expr function. The implementation only normalize...

PT-2026-81486

Name of the Vulnerable Software and Affected Versions Chainlit versions 2.4.0rc0 through 2.11.9 Description Deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the 'POST /mcp' endpoint without authentication. For stdio transport, the endpoint accepts a user-controlle...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

CVE-2026-78430

CVE-2026-78430 is an OS command injection vulnerability in sworddut mcp-ffmpeg-helper versions 0.1.0, 0.1.1, and 0.2.1. The flaw resides in the handleToolCall function within the Tool Handler component (file src/tools/handlers.ts), where improper manipulation of the format argument allows command...

CVE-2026-78430 sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

EUVD-2026-65092

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

GHSA-XM98-3VCF-FPH7 mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses...

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses...

MAL-2026-14414 Malicious code in mcp-real-chrome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952bd642bd2f2aee3fd768385ee5d8dd3d5b387c7a9171e8ddcb8983f3499d2d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...