Skip to content
OpenAdvisories

Vendor

hyperb1iss

1 known vulnerabilities.

Products

droidmind 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-117559

    DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

    DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters inte…

    hyperb1iss droidmind