{"id":"CVE-2026-30635","aliases":["EUVD-2026-29159","GHSA-64vr-4gr2-m642"],"status":"published","title":"automagik-genie has a command injection vulnerability","description":"Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/server.js when a user reads from an external FORGE_BASE_URL.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.01008,"percentile":0.63469,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2026-05-11T00:00:00Z","modified":"2026-06-17T10:32:50Z","affected":[{"source":"ghsa","ecosystem":"npm","package":"automagik-genie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.27"},{"last_affected":"2.5.27"}]}],"versions":["2.5.27"]},{"source":"osv","ecosystem":"npm","package":"automagik-genie","versions":["2.5.27"]}],"references":[{"url":"https://gist.github.com/spdc-elm/3ddecd10ffa85c5963ab7fe531619875","tags":["exploit","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-30635","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-64vr-4gr2-m642"},{"url":"https://github.com/automagik-dev/genie","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-30635","description":"Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/server.js when a user reads from an external FORGE_BASE_URL.","status":"published","published":"2026-05-11T00:00:00Z","modified":"2026-05-12T13:39:32.134Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T13:44:07.200604Z"}],"euvd":[{"id":"EUVD-2026-29159","description":"Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/server.js when a user reads from an external FORGE_BASE_URL.","status":"published","published":"2026-05-11T00:00:00Z","modified":"2026-05-12T13:39:32Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:04:37.152927Z"}],"ghsa":[{"id":"GHSA-64vr-4gr2-m642","title":"automagik-genie has a command injection vulnerability","description":"Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/server.js when a user reads from an external FORGE_BASE_URL.","status":"published","published":"2026-05-11T18:31:45Z","modified":"2026-05-18T15:27:58Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:40:11.298154Z"}],"nvd":[{"id":"CVE-2026-30635","description":"Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/server.js when a user reads from an external FORGE_BASE_URL.","status":"published","published":"2026-05-11T18:16:31.66Z","modified":"2026-06-17T10:32:50.683Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:18.239974Z"}],"osv":[{"id":"GHSA-64vr-4gr2-m642","title":"automagik-genie has a command injection vulnerability","description":"Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/server.js when a user reads from an external FORGE_BASE_URL.","status":"published","published":"2026-05-11T18:31:45Z","modified":"2026-05-18T15:41:31.167955Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:46:39.266402Z"}]}}