CVE-2026-7600
1 advisory.
npm/yii2-mcp-server CVE-2026-7600: medium 6.3, EPSS 1.82%
yii2-mcp-server has a Command Injection Issue
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gc8w-x73w-p4rh
- https://nvd.nist.gov/vuln/detail/CVE-2026-7600
- https://github.com/ArtMin96/yii2-mcp-server/issues/3
- https://github.com/BruceJqs/public_exp/issues/29
- https://github.com/ArtMin96/yii2-mcp-server
- https://vuldb.com/submit/805613
- https://vuldb.com/vuln/360557
- https://vuldb.com/vuln/360557/cti
CVE-2026-7600 · published · modified · JSON