CVE-2026-18482CWE-78command-injection

CVE-2026-18482

Critical · published August 20, 2026

CVSS v3.1
9.8
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS command execution when an AI agent is induced to invoke these tools. Commit 88c77fc fixes these vulnerabilities.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01651 · 76.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-08-20T17:16Z
References (4)
https://github.com/neomjs/neo/commit/5acc564ea1b278bca5fab1f8f397a6ba9b849d75 · [email protected]https://github.com/neomjs/neo/commit/88c77fc4 · [email protected]https://novice-22.com/posts/neo-mjs/ · [email protected]https://novice-22.com/posts/neo-mjs/ · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 20 AUG 12:36Z
    CVE-2026-18482
    cvelistv5