CVE-2026-91988
CVE-2026-91988 · atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP
This page contains facts from public vulnerability sources. Check the original advisory before updating.
atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spawned as local subprocesses by MCPClientPool to achieve code execution on the agent host.
CVSS 9.2 · Critical · EPSS 0.3% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
atomic-agents-stack
- Versions
- ≥ 0, < 1.1.0: Affected (semver)
- 1.1.0: Not affected (semver)
Update to 1.1.0
atomic-agents-stack PyPI
- Versions
- 1.0.0
- Affected ranges
- ECOSYSTEM: < 1.1.0
Update to 1.1.0