CVE-2026-7629
Gravedad CVSS v4.0:
BAJA
Tipo:
CWE-74
Neutralización incorrecta de elementos especiales en la salida utilizada por un componente interno (Inyección)
Fecha de publicación:
02/05/2026
Última modificación:
05/05/2026
Descripción
*** Pendiente de traducción *** A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1. Impacted is the function runCodeReviewTool of the file src/tools/codeReview.ts of the component Ccode-Review Tool. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
Impacto
Puntuación base 4.0
2.10
Gravedad 4.0
BAJA
Puntuación base 3.x
6.30
Gravedad 3.x
MEDIA
Puntuación base 2.0
6.50
Gravedad 2.0
MEDIA
Referencias a soluciones, herramientas e información
- https://github.com/kleneway/awesome-cursor-mpc-server/
- https://github.com/kleneway/awesome-cursor-mpc-server/issues/6
- https://github.com/kleneway/awesome-cursor-mpc-server/pull/14
- https://github.com/user-attachments/files/26019723/awesome-cursor-mpc-server_bug.pdf
- https://vuldb.com/submit/806470
- https://vuldb.com/vuln/360575
- https://vuldb.com/vuln/360575/cti
- https://github.com/kleneway/awesome-cursor-mpc-server/issues/6