CVE-2026-75011

Name of the Vulnerable Software and Affected Versions kylecui NetForensicMCP version 2.1.0

Description A flaw in the execAsync() function within the index.js file allows for remote command injection. This occurs when the interface/protocol argument is manipulated, enabling an attacker to execute arbitrary commands on the system.

Recommendations As a temporary workaround, restrict the use of the execAsync() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.