awwaiid mcp-server-taskwarrior vulnerable to command injection

A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation of the argument Identifier leads to command injection. The attack must be carried out locally. The exploit has been...

CVE-2026-5833 awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection

A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation of the argument Identifier leads to command injection. The attack must be carried out locally. The exploit has been...

CVE-2026-5833

Vulnerability CVE-2026-5833 affects awwaiid mcp-server-taskwarrior up to v1.0.1. The flaw resides in index.ts, function server.setRequestHandler, where manipulation of the Identifier enables command injection. Local attack required. Exploit publicly disclosed; remediation via official patch 1ee3d...

PT-2026-31572

Name of the Vulnerable Software and Affected Versions awwaiid mcp-server-taskwarrior versions prior to 1.0.2 Description A command injection issue exists that requires local access to exploit. The problem occurs within the server.setRequestHandler function located in the index.ts file, where...