Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | 7.5 | CVE-2026-106765 |
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.
rog0xrog0x mcp-docker-tools, rog0x mcp-git-tools
|
NVD | |||
|
CVE-2026-106765An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.
Executive summaryAn npm package named @rog0x/mcp-docker-tools version 1.0.1 is reported to let a remote attacker run arbitrary code. The advisory does not state a severity score, and it does not say whether a fix is available. Technical summaryThe advisory describes an arbitrary code execution issue in the handleImageList function of @rog0x/mcp-docker-tools 1.0.1, which is reachable from tool arguments. The vulnerability class is described as command injection and the advisory states the attacker is remote. The advisory's text is an NVD description plus a linked GitHub issue that says the same command-injection class exists in the sibling package @rog0x/mcp-git-tools, with arguments reaching a shell without escaping, and that input could arrive through indirect prompt injection. The affected version is stated as 1.0.1, and no fixed version, CVSS score, workaround, or detection guidance is stated. The GitHub issue suggests passing arguments as an array to execFile or spawn, but this is a proposed remediation from the reporter rather than a vendor fix. The reporter has not published technical details and requests a private disclosure channel. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/rog0x/mcp-git-tools/issues/1 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.5 | CVE-2026-106764 |
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.
rog0xrog0x mcp-docker-tools, rog0x mcp-git-tools
|
NVD | |||
|
CVE-2026-106764An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.
Executive summaryA researcher reports that two open-source tool packages for AI assistants, @rog0x/mcp-git-tools and @rog0x/mcp-docker-tools (version 1.0.1), contain a flaw that lets a remote attacker run arbitrary code. The advisory does not state a severity score, and no fixed version or vendor recommendation is given. The researcher has not published technical details and is asking for a private disclosure channel, so defenders should treat these packages as at risk until the maintainers respond. Technical summaryThe NVD entry describes arbitrary code execution through the resolveBaseBranch function in @rog0x/mcp-git-tools 1.0.1. The researcher describes a command-injection flaw where a documented tool argument supplied by an LLM reaches a shell without escaping, so indirect prompt injection could be a trigger. The researcher also says the same class of issue exists in @rog0x/mcp-docker-tools 1.0.1, but this is not confirmed by the maintainers. The advisory does not state a CVSS score, a fixed version, a workaround, or whether exploitation has been observed. The researcher suggests passing arguments as an array to execFile or spawn, but this is a proposed fix, not a vendor statement. No detection guidance is given. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/rog0x/mcp-git-tools/issues/1 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||