CVE-2026-7628
A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0. This issue affects the function executeRepomix of the file src/repomix.ts of the component RepoMix Command Handler. Performing a manipulation results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
वीकनेस
A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0. This issue affects the function executeRepomix of the file src/repomix.ts of the component RepoMix Command Handler. Performing a manipulation results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
संदर्भ
- https://github.com/crazyrabbitLTC/mcp-code-review-server/
- https://github.com/crazyrabbitLTC/mcp-code-review-server/issues/4
- https://github.com/crazyrabbitLTC/mcp-code-review-server/pull/5
- https://github.com/user-attachments/files/26018245/mcp-code-review-server_bug.pdf
- https://vuldb.com/submit/806469
- https://vuldb.com/vuln/360574
हमलावर से पहले बग आप ढूँढें।
GitHub से साइन इन करें और एक मिनट से भी कम में अपना पहला ऑडिट चलाएँ। फ़्री प्लान के लिए क्रेडिट कार्ड की ज़रूरत नहीं।