CVE-2026-19045

MEDIUM

CVE: CVE-2026-19045 - A weakness has been identified in NocteDefensor LudusMCP up to 1Sign in to save

CVSS

5.3

CVSS v3.1

EPSS

0.6%

Exploit Prediction Score

Published

August 6, 2026

Exploitability

EPSS probability 0.6%

Description

A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_credential_from_user. This manipulation of the argument Description causes command injection. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Weaknesses

CWE-74CWE-77

Affected Packages

No package data available.

Aliases

CVE-2026-19045

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/NocteDefensor/LudusMCP/
https://github.com/NocteDefensor/LudusMCP/issues/2
https://github.com/gongyanyugyy/public_exp/issues/1
https://vuldb.com/cve/CVE-2026-19045
https://vuldb.com/submit/863833
https://vuldb.com/vuln/386492
https://vuldb.com/vuln/386492/cti