MIMICLab vulnerabilities

🔔 Create alert RSS

Published CVEs affecting MIMICLab products: 1 record(s), with severity, exploitation and fixes.

Mcp-pdf-vision 1

Exploited only (KEV) →

CVE-2026-19279 Medium · 5.3 CWE-74 Aug 8, 2026

MIMICLab mcp-pdf-vision index.ts load_pdf command injection

A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function load_pdf of the file src/index.ts. Such manipulation of the argument pdfPath/sessionId leads to command injection. The attack can only be performed from a local environment. The project was informed of the problem early through an issue report but has not responded yet.