Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-119025 (GCVE-0-2026-119025)

Vulnerability from nvd – Published: 2026-10-29 11:24 – Updated: 2026-10-29 11:24

Title

open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

Summary

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 7155 records in the last 180 days details

References

8 references

URL	Tags
https://github.com/sindresorhus/open/commit/274d7…	patch
https://github.com/sindresorhus/open/releases/tag…	release-notes
https://github.com/sindresorhus/open/blob/v10.2.0…	technical-description
https://github.com/sindresorhus/open/blob/v7.2.0/…	technical-description
https://github.com/modelcontextprotocol/inspector…	vendor-advisory
https://github.com/anomalyco/opencode/pull/51414	patchissue-tracking
https://github.com/anomalyco/opencode/commit/29f0…	patch
https://www.vulncheck.com/advisories/open-7.2.0-b…	third-party-advisory

Impacted products

3 products

Vendor	Product	Version
sindresorhus	open	Affected: 7.2.0 , < 11.0.0 (semver)
modelcontextprotocol	inspector	Affected: 2.0.0 , < 2.12.0 (semver)
anomalyco	opencode	Affected: 1.0.137 , < 1.18.33 (semver)

Date Public

2026-10-19 00:00

Credits

Eilon Cohen (Pillar Security)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/open",
          "product": "open",
          "vendor": "sindresorhus",
          "versions": [
            {
              "lessThan": "11.0.0",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/%40modelcontextprotocol/inspector",
          "product": "inspector",
          "vendor": "modelcontextprotocol",
          "versions": [
            {
              "lessThan": "2.12.0",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/opencode-ai",
          "product": "opencode",
          "vendor": "anomalyco",
          "versions": [
            {
              "lessThan": "1.18.33",
              "status": "affected",
              "version": "1.0.137",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Eilon Cohen (Pillar Security)"
        }
      ],
      "datePublic": "2026-10-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-29T11:24:18.723Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/sindresorhus/open/commit/274d70446bf38a7b7d50b214dd3962ef8ea9320d"
        },
        {
          "name": "open v11.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/sindresorhus/open/releases/tag/v11.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/sindresorhus/open/blob/v10.2.0/index.js#L189-L203"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/sindresorhus/open/blob/v7.2.0/index.js#L60-L99"
        },
        {
          "name": "GitHub Security Advisory (GHSA-q978-78c7-phqw)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-q978-78c7-phqw"
        },
        {
          "name": "opencode Pull Request #51414",
          "tags": [
            "patch",
            "issue-tracking"
          ],
          "url": "https://github.com/anomalyco/opencode/pull/51414"
        },
        {
          "name": "opencode Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/anomalyco/opencode/commit/29f07e0c69ad8668e0e15b0eb54f2fcb342af98c"
        },
        {
          "name": "VulnCheck Advisory: open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/open-7.2.0-before-11.0.0-os-command-injection-via-powershell-on-windows"
        }
      ],
      "title": "open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-119025",
    "datePublished": "2026-10-29T11:24:18.723Z",
    "dateReserved": "2026-10-29T11:19:44.165Z",
    "dateUpdated": "2026-10-29T11:24:18.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-119025 (GCVE-0-2026-119025)

Vulnerability from cvelistv5 – Published: 2026-10-29 11:24 – Updated: 2026-10-29 11:24

Title

open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

Summary

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 7155 records in the last 180 days details

References

8 references

URL	Tags
https://github.com/sindresorhus/open/commit/274d7…	patch
https://github.com/sindresorhus/open/releases/tag…	release-notes
https://github.com/sindresorhus/open/blob/v10.2.0…	technical-description
https://github.com/sindresorhus/open/blob/v7.2.0/…	technical-description
https://github.com/modelcontextprotocol/inspector…	vendor-advisory
https://github.com/anomalyco/opencode/pull/51414	patchissue-tracking
https://github.com/anomalyco/opencode/commit/29f0…	patch
https://www.vulncheck.com/advisories/open-7.2.0-b…	third-party-advisory

Impacted products

3 products

Vendor	Product	Version
sindresorhus	open	Affected: 7.2.0 , < 11.0.0 (semver)
modelcontextprotocol	inspector	Affected: 2.0.0 , < 2.12.0 (semver)
anomalyco	opencode	Affected: 1.0.137 , < 1.18.33 (semver)

Date Public

2026-10-19 00:00

Credits

Eilon Cohen (Pillar Security)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/open",
          "product": "open",
          "vendor": "sindresorhus",
          "versions": [
            {
              "lessThan": "11.0.0",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/%40modelcontextprotocol/inspector",
          "product": "inspector",
          "vendor": "modelcontextprotocol",
          "versions": [
            {
              "lessThan": "2.12.0",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:npm/opencode-ai",
          "product": "opencode",
          "vendor": "anomalyco",
          "versions": [
            {
              "lessThan": "1.18.33",
              "status": "affected",
              "version": "1.0.137",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Eilon Cohen (Pillar Security)"
        }
      ],
      "datePublic": "2026-10-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-29T11:24:18.723Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/sindresorhus/open/commit/274d70446bf38a7b7d50b214dd3962ef8ea9320d"
        },
        {
          "name": "open v11.0.0 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/sindresorhus/open/releases/tag/v11.0.0"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/sindresorhus/open/blob/v10.2.0/index.js#L189-L203"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/sindresorhus/open/blob/v7.2.0/index.js#L60-L99"
        },
        {
          "name": "GitHub Security Advisory (GHSA-q978-78c7-phqw)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-q978-78c7-phqw"
        },
        {
          "name": "opencode Pull Request #51414",
          "tags": [
            "patch",
            "issue-tracking"
          ],
          "url": "https://github.com/anomalyco/opencode/pull/51414"
        },
        {
          "name": "opencode Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/anomalyco/opencode/commit/29f07e0c69ad8668e0e15b0eb54f2fcb342af98c"
        },
        {
          "name": "VulnCheck Advisory: open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/open-7.2.0-before-11.0.0-os-command-injection-via-powershell-on-windows"
        }
      ],
      "title": "open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-119025",
    "datePublished": "2026-10-29T11:24:18.723Z",
    "dateReserved": "2026-10-29T11:19:44.165Z",
    "dateUpdated": "2026-10-29T11:24:18.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

2 vulnerabilities found for open by sindresorhus

CVE-2026-119025 (GCVE-0-2026-119025)

CVE-2026-119025 (GCVE-0-2026-119025)