CVE Intelligence

ChrisChinchilla vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ChrisChinchilla products: 1 record(s), with severity, exploitation and fixes.

Vale-MCP 1

Exploited only (KEV) →

CVE-2026-5621 Medium · 5.3 CWE-77 Apr 6, 2026
ChrisChinchilla Vale-MCP HTTP index.ts os command injection
A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown functionality of the file src/index.ts of the component HTTP Interface. The manipulation of the argument config_path results in os command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.