Skip to content
OpenAdvisories

Package · npm

@ooples/token-optimizer-mcp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-55156

    Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints

    Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, the dashboard HTTP server in token-optimizer-mcp exposes /api/session-summary and /api/se…

    ooples token-optimizer-mcp @ooples/token-optimizer-mcp npm
  • High 8.4
    CVE-2026-55157

    Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

    Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smart_user tool. Any MCP…

    ooples token-optimizer-mcp @ooples/token-optimizer-mcp npm