PT-2026-69252 · Code-Mcp · Code-Mcp
CVSS v3.1
5.3
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
andreahaku codex mcp versions up to 1ff521cc6cc57cfe56ddef946c644b8534771390
Description
Command injection is possible in the ask MCP Tool component within the file src/codex-process-simple.ts. The issue occurs when the
model argument is manipulated, allowing an attacker with local access to execute arbitrary commands.Recommendations
Update andreahaku codex mcp to a version later than 1ff521cc6cc57cfe56ddef946c644b8534771390.
As a temporary mitigation, restrict local access to the ask MCP Tool component to minimize the risk of exploitation.
Exploit
Fix
Special Elements Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Code-Mcp