CVE-2026-5831
1 advisory.
npm/taskflow-ai CVE-2026-5831: medium 6.3
Agions taskflow-ai vulnerable to os command injection in src/mcp/server/handlers.ts
Action: Upgrade taskflow-ai to 2.1.9 or later.
npm i taskflow-ai@2.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.9 | - |
Fixed versions
| 2.1.9 |
Sources
- osv: GHSA-3xp3-pr8x-f755
- https://nvd.nist.gov/vuln/detail/CVE-2026-5831
- https://github.com/Agions/taskflow-ai/issues/2
- https://github.com/Agions/taskflow-ai/commit/c1550b445b9f24f38c4414e9a545f5f79f23a0fe
- https://github.com/Agions/taskflow-ai
- https://github.com/Agions/taskflow-ai/releases/tag/v2.1.9
- https://vuldb.com/submit/789515
- https://vuldb.com/vuln/356278
- https://vuldb.com/vuln/356278/cti
CVE-2026-5831 · published · modified · JSON