Threats Tagged 'cve-2026-19039'

A vulnerability identified as CVE-2026-19039 affects the Kino-Kafkaesque ssh-mcp-server up to a specific commit. It involves the ssh_exec function in the SSH Command Handler component, where manipulation of host or username arguments can lead to command injection. The vulnerability requires local access to exploit. The maintainers note that the server is intended as a local trusted tool, implying that callers already have significant execution privileges. The product uses a rolling release model, so exact affected versions are not specified. The CVSS score is 5.3, indicating a low severity level.

CVE-2026-19039 is a medium severity command injection vulnerability in the Kino-Kafkaesque ssh-mcp-server. It affects the ssh_exec function in the SSH Command Handler component, allowing local attackers to manipulate host or username arguments to inject commands. The vulnerability's actual existence is uncertain, and the product is a local/trusted tool intended for agents with existing execution capabilities. No specific affected versions or patches are provided due to the product's rolling release model.