VYPR

mcp-docs-rag

by Kazuph

CVEs (1)

  • CVE-2026-5007MedMar 28, 2026
    risk 0.35cvss 5.3epss 0.01

    A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component add_git_repository/add_text_file. The manipulation leads to os command injection. The attack needs to be performed locally. The…