Skip to content
OpenAdvisories

Package · PyPI

upsonic

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-30625

    Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

    Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands (npm, …

    upsonic PyPI