Product

Code-Mcp

2 briefs RSS

54yyyu code-mcp Command Injection Vulnerability (CVE-2026-7812)

A command injection vulnerability (CVE-2026-7812) exists in the git_operation function of 54yyyu code-mcp's MCP Tool, allowing remote attackers to execute arbitrary commands by manipulating the operation argument.

code-mcp command-injection web-application cve-2026-7812

2r 1t 1c 2h ago

high advisory

54yyyu code-mcp Path Traversal Vulnerability (CVE-2026-7811)

2 rules 1 TTP 1 CVE

A path traversal vulnerability exists in the is_safe_path function of the MCP File Handler component in 54yyyu code-mcp, allowing remote attackers to access sensitive files.

code-mcp path-traversal web-application CVE-2026-7811

2r 1t 1c Jan 3, 2024