CVE-2026-2178
1 advisory.
npm/xcode-mcp-server CVE-2026-2178: medium 6.3, EPSS 3.80%
xcode-mcp-server vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-84fx-pwf3-7777
- https://nvd.nist.gov/vuln/detail/CVE-2026-2178
- https://github.com/r-huijts/xcode-mcp-server/issues/13
- https://github.com/r-huijts/xcode-mcp-server/issues/13#issue-3878065790
- https://github.com/r-huijts/xcode-mcp-server/commit/11f8d6bacadd153beee649f92a78a9dad761f56f
- https://github.com/r-huijts/xcode-mcp-server
- https://vuldb.com/?ctiid.344881
- https://vuldb.com/?id.344881
- https://vuldb.com/?submit.749569
CVE-2026-2178 · published · modified · JSON