CVE-2026-19263

INQUIRELAB mcp-bridge-api (up to b30a82aa1d1d1139e0de846c41c8aadee6e06114), specifically the Servers Endpoint component mcp-bridge.js, is affected by a command injection vulnerability triggered by manipulating the command/args argument. The issue allows remote initiation. The product uses a rolli...