Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 1.4%	CVE-2026-5621Vale-MCP · OS Command Injection Medium4.8EPSS 1.4%2026-04-06CVE Database V5CVE-2026-5621 CVE-2026-5621 is an OS command injection vulnerability in ChrisChinchilla Vale-MCP version 0.1.0. It affects an unknown functionality within the HTTP Interface component, specifically related to the manipulation of the config_path argument. Exploitation requires local access to the system. The vulnerability has a medium severity score of 4.8 and an exploit has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or official remediation is currently available. EPSS 1.4%Vulnerability ChrisChinchilla	CVE Database V5	2026-04-06

Showing 1–1 of 1 result