CVE-2026-7600

ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection

View on CVE.org
Published May 2, 2026 CVSS 4.0 · 5.3 Medium EPSS 1.2% KEV · Not listed
Description
A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Analysis

AI-generated

Technical impact

This vulnerability in ArtMin96 yii2-mcp-server 1.0.2 allows an attacker to inject operating system commands via the yii_execute_command endpoint in src/index.ts, resulting in remote command execution. The flaw arises from insufficient input validation and is identified as CWE-77 and CWE-78, enabling an attacker to run arbitrary system commands with the privileges of the web process.

Affected Systems

Affected is the ArtMin96 yii2-mcp-server component, version 1.0.2. No other versions are explicitly listed, but the flaw is localized to the yii_command_help/yii_execute_command function in this release.

Risk and Exploitability

The CVSS score is 5.3, indicating a medium severity. EPSS is not available, which does not confirm current exploitation probability but the presence of a published exploit suggests it could be exploited. The vulnerability is not listed in the CISA KEV catalog. An attacker can reach the target remotely, sending crafted input to the MCP interface to trigger command execution.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to a patched or newer version of yii2-mcp-server once the vendor releases a fix.
  • Restrict network access to the MCP interface so that only trusted networks or hosts can reach it.
  • Add input validation or sanitization to the yii_execute_command handler to filter out shell metacharacters.

Generated by OpenCVE AI on May 2, 2026 at 06:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-gc8w-x73w-p4rh yii2-mcp-server has a Command Injection Issue
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Artmin96
Artmin96 yii2-mcp-server
Vendors & Products Artmin96
Artmin96 yii2-mcp-server
Type Values Removed Values Added
Description A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection
Weaknesses CWE-77
CWE-78
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
May 4, 2026, 5:10 PM
Reserved
May 1, 2026, 10:49 AM

View source JSON

Updated
May 4, 2026, 5:10 PM

JSON

Status
Deferred
Published
May 2, 2026, 1:16 AM
Modified
Oct 26, 2026, 8:10 PM

View source JSON

No data.

Updated
May 4, 2026, 4:07 PM

JSON