p PatchFirst

PatchFirst · Latest vulnerabilities

automagik-genie vulnerabilities

Vulnerabilities published for automagik-genie in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-30635

    High · CVSS 8.1EPSS 1.01%No fix published

    CVE-2026-30635

    Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/server.js when a user reads from an external FORGE_BASE_URL.

    automagik-genieNode.js
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →