VulnSocial

CVE-2026-117560

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $() or backtick substitutions into parameters like message_id, subject, or query, running commands as the user.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-28: 110-28
Referenced assets1 URL
By indicator
Full discourse1 post
  • とよ@建ログ@ytp4n1994

    CVE-2026-117560 説明 ATXP Gemini CLI拡張機能のバージョン1.0.0までには、runAtxp()関数にOSコマンドインジェクションの脆弱性が存在し、攻撃者はサニタイズされていないMCPツールパラメータを介してシェルコマンドを実行できます。攻撃者は、電子メールやSMSの内容に指示を仕込み、message_id、subject、queryなどのパラメータに$()やバッククォート置換を挿入し、ユーザーとしてコマンドを実行できます。 https://nvd.nist.gov/vuln/detail/cve-2026-117560

    00000120
    530 followersView on X

Explore more

Back to dashboard