Skip to content
OpenAdvisories

Vendor

ooples

2 known vulnerabilities.

Products

token-optimizer-mcp 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-55157

    Token Optimizer MCP: OS command injection in smart_user via username in get-user-info

    Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smart_user tool. Any MCP…

    ooples token-optimizer-mcp @ooples/token-optimizer-mcp npm