CVE-2026-5007 in kazuph mcp-docs-rag

摘要 (英语)

A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component add_git_repository/add_text_file. The manipulation leads to os command injection. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

披露

2026-03-28

条目

标识符	漏洞	CWE	基础	临时	0day	今天	可利用	KEV	EPSS	CTI	对策	CVE
353892	kazuph mcp-docs-rag add_git_repository/add_text_file index.ts cloneRepository 权限提升	78	5.3	4.8	$0-$5k	$0-$5k	概念验证		0.00178	0.69	未定义	CVE-2026-5007

显示更多

• 描述
• 更改
• 网络威胁情报
• API/JSON