Skip to content
OpenAdvisories

Vendor

maquina-app

1 known vulnerabilities.

Products

rails-mcp-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-81097

    rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape

    The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor repla…

    maquina-app rails-mcp-server