Threats tagged 'ghsa-27qc-j388-jw8p'

A security vulnerability (CVE-2026-90812) exists in cosmicstack-labs mercury-agent up to version 1.2.0. It affects the checkShellCommand function in the Shell Command Permission component, leading to incorrect privilege assignment. The vulnerability can be exploited remotely. The issue was reported early but the project has not yet responded or issued a fix. The CVSS score is 4.3, indicating a low severity impact.