CVE-2026-19263
A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114.
Impact
A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of the component Servers Endpoint. Performing a manipulation of the argument command/args results in command injection. It is possible to initiate the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The pull request to fix this issue awaits acceptance.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/INQUIRELAB/mcp-bridge-api/
- https://github.com/INQUIRELAB/mcp-bridge-api/issues/1
- https://github.com/INQUIRELAB/mcp-bridge-api/issues/1#issuecomment-4320749148
- https://vuldb.com/cve/CVE-2026-19263
- https://vuldb.com/submit/865220
- https://vuldb.com/vuln/387010
- https://vuldb.com/vuln/387010/cti