Vendor

Idachev

1 brief RSS

idachev mcp-javadc OS Command Injection via HTTP Interface (CVE-2026-5802)

A remote command injection vulnerability (CVE-2026-5802) exists in idachev mcp-javadc up to version 1.2.4 via the HTTP Interface by manipulating the jarFilePath argument, allowing unauthenticated attackers to execute arbitrary OS commands.

mcp-javadc command-injection web-application cve-2026-5802

2r 1t 1c Jan 3, 2024