CVE-2026-44450: CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in prolix-oc Lumiverse
CVE-2026-44450 is a critical vulnerability in prolix-oc Lumiverse versions prior to 0. 9. 7. It allows any authenticated user to execute arbitrary OS-level commands on the server due to improper validation of command arguments passed to child processes. The vulnerability arises because the MCP server creation endpoint validates only the binary name against an allowlist but does not validate the arguments, which can include inline code execution flags. The server listens on all interfaces and the host-header check can be bypassed, enabling exploitation from any machine with network access to the server port. This issue is fixed in version 0. 9. 7.
AI Analysis
Technical Summary
Lumiverse, an AI chat application by prolix-oc, had a vulnerability (CWE-88) in versions before 0.9.7 where the MCP server creation endpoint validated the command binary name against an allowlist but forwarded the args array without validation. Since allowed binaries accept inline code execution flags (-e or -c), any logged-in user could execute arbitrary OS commands. The endpoint requires only authentication, not ownership, and the server binds to all network interfaces. The host-header rebinding check is trivially bypassed by sending a Host header with localhost and the port, allowing remote exploitation from any network-accessible machine. The vulnerability is fixed in version 0.9.7.
Potential Impact
Exploitation allows any authenticated user to achieve arbitrary OS-level code execution on the Lumiverse server, leading to complete compromise of confidentiality, integrity, and availability. The vulnerability is remotely exploitable from any machine with network access to the server port due to the server binding on all interfaces and the trivial bypass of host-header checks. This can result in full system takeover.
Mitigation Recommendations
This vulnerability is fixed in Lumiverse version 0.9.7. Users should upgrade to version 0.9.7 or later to remediate this issue. No other mitigation or temporary fix is indicated. Patch status is not explicitly stated but the fix is confirmed in version 0.9.7.
CVE-2026-44450: CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in prolix-oc Lumiverse
Description
CVE-2026-44450 is a critical vulnerability in prolix-oc Lumiverse versions prior to 0. 9. 7. It allows any authenticated user to execute arbitrary OS-level commands on the server due to improper validation of command arguments passed to child processes. The vulnerability arises because the MCP server creation endpoint validates only the binary name against an allowlist but does not validate the arguments, which can include inline code execution flags. The server listens on all interfaces and the host-header check can be bypassed, enabling exploitation from any machine with network access to the server port. This issue is fixed in version 0. 9. 7.
CVSS v3.1
Score 9.9critical
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Lumiverse, an AI chat application by prolix-oc, had a vulnerability (CWE-88) in versions before 0.9.7 where the MCP server creation endpoint validated the command binary name against an allowlist but forwarded the args array without validation. Since allowed binaries accept inline code execution flags (-e or -c), any logged-in user could execute arbitrary OS commands. The endpoint requires only authentication, not ownership, and the server binds to all network interfaces. The host-header rebinding check is trivially bypassed by sending a Host header with localhost and the port, allowing remote exploitation from any network-accessible machine. The vulnerability is fixed in version 0.9.7.
Potential Impact
Exploitation allows any authenticated user to achieve arbitrary OS-level code execution on the Lumiverse server, leading to complete compromise of confidentiality, integrity, and availability. The vulnerability is remotely exploitable from any machine with network access to the server port due to the server binding on all interfaces and the trivial bypass of host-header checks. This can result in full system takeover.
Mitigation Recommendations
This vulnerability is fixed in Lumiverse version 0.9.7. Users should upgrade to version 0.9.7 or later to remediate this issue. No other mitigation or temporary fix is indicated. Patch status is not explicitly stated but the fix is confirmed in version 0.9.7.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-06T15:49:25.192Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a16041ae29bf47b505e9f37
Added to database: 5/26/2026, 8:35:38 PM
Last enriched: 5/26/2026, 8:48:49 PM
Last updated: 5/27/2026, 3:55:04 AM
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.