tag
Model-Context-Protocol
CVE-2026-6130
misc
MEDIUM
local-mcp exec Tool Sandbox/Restriction Bypass (CVE-2026-6130)
This is not a standalone PoC script but the actual local-mcp MCP server codebase, whose exec tool contains the real CVE-2026-6130 bypass: a workaround using a generated batch file plus base64 encoding that circumvents intended command-execution restrictions…
Unverified
2026-07-05
None assigned as of 2026-07-03
web
HIGH
Flowise Custom MCP Environment Variable Case Bypass
Flowise's Custom MCP stdio node validates configured environment variables against a denylist (PATH, LDLIBRARYPATH, DYLDLIBRARYPATH, NODEOPTIONS) using exact, case-sensitive string comparison. Windows, however, treats environment variable names…
Unverified
2026-07-03