Skip to content

CVE record · 1 source

CVE-2026-119025

CVSS 7.5

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on…

Vendor: Sindresorhus, Modelcontextprotocol, Anomalyco
Product: open, inspector, opencode
CVSS v3.1: 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-78
Exposure class: AI infrastructure

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 8d ago

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on…

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as…

CVSS 7.5 CVE-2026-119025 Sindresorhus Modelcontextprotocol