Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2026/04/09 6:30 a.m.4 views

awwaiid mcp-server-taskwarrior vulnerable to command injection

A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation of the argument Identifier leads to command injection. The attack must be carried out locally. The exploit has been...

5.3CVSS5.6AI score0.00372EPSS
Exploits0References10Affected Software1
CVE
CVE
added 2026/04/09 2:15 a.m.5 views

CVE-2026-5833

Vulnerability CVE-2026-5833 affects awwaiid mcp-server-taskwarrior up to v1.0.1. The flaw resides in index.ts, function server.setRequestHandler, where manipulation of the Identifier enables command injection. Local attack required. Exploit publicly disclosed; remediation via official patch 1ee3d...

5.3CVSS5.6AI score0.00372EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/09 2:15 a.m.29 views

CVE-2026-5833 awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection

A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation of the argument Identifier leads to command injection. The attack must be carried out locally. The exploit has been...

5.3CVSS0.00372EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.1 views

PT-2026-31572

Name of the Vulnerable Software and Affected Versions awwaiid mcp-server-taskwarrior versions up to 1.0.1 Description A security issue exists in awwaiid mcp-server-taskwarrior up to version 1.0.1. The server.setRequestHandler function within the index.ts file is susceptible to command injection...

5.3CVSS6AI score0.00372EPSS
Exploits0References13
Rows per page
Query Builder