CoreCVE
Back

MEDIUM

choieastsea simple-openstack-mcp server.py exec_openstack os command injection

Published Apr 26, 2026

Description

A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58399e6036. The affected element is the function exec_openstack of the file server.py. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-77

CWE-78

OS Command Injection

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Apr 26, 2026
Updated Apr 27, 2026
Reserved Apr 26, 2026
Link CVE-2026-7066
CISA Vulnrichment
Updated Apr 27, 2026
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2026-7066
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-7066
ENISA EUVD
Assigner VulDB
Published Apr 26, 2026
Updated Apr 27, 2026
Exploited since n/a
Link EUVD-2026-25736
EUVD-2026-25736