CVE-2026-78430

sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection

View on CVE.org
Published Aug 24, 2026 CVSS 4.0 · 4.8 Medium EPSS 1.1% KEV · Not listed
Description
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Analysis

AI-generated

Technical impact

The vulnerability resides in the handleToolCall function of the mcp-ffmpeg-helper project. An attacker who can locally interact with the tool can craft a malicious format argument that is passed directly to the operating system shell. This results in arbitrary command execution, allowing the attacker to run any commands on the host with the privileges of the process that owns the tool. The weakness is a classic OS command injection (CWE‑77) and implements an indirect command execution vector (CWE‑78).

Affected Systems

The affected application is sworddut’s mcp‑ffmpeg‑helper version 0.1.0, 0.1.1, and 0.2.1. No further vendor or product variants are listed. Users who run these versions in an environment where the tool is exposed to local input are at risk.

Risk and Exploitability

The CVSS score of 4.8 indicates moderate severity, but the vulnerability is exploitable only when an attacker has local access to the system and can issue commands to the tool. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited known exploitation. Nonetheless, because the local attacker can achieve full command execution, the risk to confidentiality, integrity, and availability is significant for any environment where the helper runs with elevated or unnecessary privileges.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade mcp-ffmpeg-helper to a version that removes the vulnerable handleToolCall logic (a patch or newer release approved by the project maintainers).
  • If an update is unavailable, disable or remove the handleToolCall functionality and restrict the tool to only trusted input sources, or replace it with a validated, safe alternative.
  • Run mcp-ffmpeg-helper with the least privileges possible, and isolate its execution in a restricted container or dedicated user account so that local command injection cannot affect critical system components.

Generated by OpenCVE AI on August 24, 2026 at 21:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection
First Time appeared Sworddut
Sworddut mcp-ffmpeg-helper
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:a:sworddut:mcp-ffmpeg-helper:*:*:*:*:*:*:*:*
Vendors & Products Sworddut
Sworddut mcp-ffmpeg-helper
References
Metrics cvssV2_0

{'score': 4.3, 'vector': 'AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Aug 24, 2026, 7:58 PM
Reserved
Aug 24, 2026, 3:41 PM

View source JSON

Updated
Aug 24, 2026, 7:58 PM

JSON

Status
Deferred
Published
Aug 24, 2026, 8:17 PM
Modified
Oct 12, 2026, 3:10 PM

View source JSON

No data.

Updated
Aug 28, 2026, 8:38 PM

JSON