Skip to content
OpenAdvisories

Vendor

horw

1 known vulnerabilities.

Products

esp-mcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-117567

    esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

    esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt injection can inject …

    horw esp-mcp