Threats affecting pkg:github/chrischinchilla/Vale-MCP

CVE-2026-5621 is an OS command injection vulnerability in ChrisChinchilla Vale-MCP version 0.1.0. It affects an unknown functionality within the HTTP Interface component, specifically related to the manipulation of the config_path argument. Exploitation requires local access to the system. The vulnerability has a medium severity score of 4.8 and an exploit has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or official remediation is currently available.