CVE-2026-5528
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
A vulnerability was detected in MoussaabBadla code-screenshot-mcp up to version 0.1.0 allowing OS command injection via the HTTP Interface component. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.
Risk Assessment
A remote attacker can execute arbitrary system commands on the server, potentially leading to full compromise of the application and data security.
Recommendation
Immediately disconnect the application from the network and contact the vendor for an update. Consider replacing the application with an alternative solution.
Original NVD description (English source)
A security vulnerability has been detected in MoussaabBadla code-screenshot-mcp up to 0.1.0. This affects an unknown part of the component HTTP Interface. Such manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.