CVSS
7.3
CVSS v3.1
EPSS
1.3%
Exploit Prediction Score
Published
August 8, 2026
Exploitability
EPSS probability 1.3%
A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of the component Servers Endpoint. Performing a manipulation of the argument command/args results in command injection. It is possible to initiate the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The pull request to fix this issue awaits acceptance.
No package data available.
Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).