CVE-2026-117560
CVE-2026-117560 · ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools
This page contains facts from public vulnerability sources. Check the original advisory before updating.
ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $() or backtick substitutions into parameters like message_id, subject, or query, running commands as the user.
CVSS 8.5 · High · EPSS 0.7%
- Published
- Updated
Affected products and versions
gemini-cli-extension
- Versions
- ≥ 0, ≤ 1.0.0: Affected (semver)
No fix published
Original sources
- https://github.com/atxp-dev/atxp/issues/15
- https://github.com/atxp-dev/atxp
- https://github.com/atxp-dev/atxp/blob/4e88b0282b51ae7c22ea1b6ca4476a39298299ff/src/server.ts#L28-L40
- https://www.vulncheck.com/advisories/atxp-gemini-cli-extension-through-1.0.0-os-command-injection-via-mcp-tools
- https://nvd.nist.gov/vuln/detail/CVE-2026-117560