p PatchFirst

PatchFirst · Latest vulnerabilities

yii2-mcp-server vulnerabilities

Vulnerabilities published for yii2-mcp-server in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-7600

    Medium · CVSS 5.3EPSS 1.22%No fix published

    ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection

    A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

    yii2-mcp-serverNode.js
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →