CVE-2026-2130

BurtTheCoder mcp-maigret (versions up to 1.0.12) contains a command injection flaw in the search_username component. The vulnerability affects an unknown portion of src/index.ts and allows manipulation of the Username argument to execute arbitrary commands, potentially remotely. A fix is availabl...