Back to overview

CVE-2026-16133

MEDIUM
5.0
CVSS 3.1
Description
A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function child_process.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Metadata

CVE ID
CVE-2026-16133
State
PUBLISHED
Assigner
VulDB
Reserved
2026-07-17 16:19 UTC
Published
2026-07-18 19:00 UTC
Last updated
2026-07-18 19:00 UTC
Primary CWE
CWE-77
Command Injection
Vendor / Product
LiuMengxuan04 / MiniCode
Sources
cve.org  ·  NVD

Severity & Metrics

5.0 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
Affected products (1)
VendorProductPlatformVersions
LiuMengxuan04 MiniCode — 0.1.0
Weakness (CWE)
CWESourceDescription
CWE-74 cna Injection
CWE-77 cna Command Injection
CVSS scores (4)
ScoreSeverityVersionSourceVector
5.1 N/D 2.0 cna AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
5.0 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
5.0 MEDIUM 3.0 cna CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2.3 LOW 4.0 cna CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
References (8)
Back to overview