Vendor
bitscorp-mcp
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.0
mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir
mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $(), backti…