PT-2026-69252
CVE-2026-19329
·
Published
2026-08-09
·
Updated
2026-08-09
Description by
CVSS 3.1
5.3
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
andreahaku codex mcp versions up to 1ff521cc6cc57cfe56ddef946c644b8534771390
Description
Command injection is possible in the ask MCP Tool component within the file src/codex-process-simple.ts. The issue occurs when the
model argument is manipulated, allowing an attacker with local access to execute arbitrary commands.Recommendations
Update andreahaku codex mcp to a version later than 1ff521cc6cc57cfe56ddef946c644b8534771390.
As a temporary mitigation, restrict local access to the ask MCP Tool component to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾