Vulnerability · Published Aug 20, 2026 · Assigned by certcc

CVE-2026-18482CVE-2026-18482

Critical 9.8

In plain English

A critical-severity OS command injection in neo-mjs from Klarso GmbH. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.4% (higher than 89% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)3.4%top 11.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS command execution when an AI agent is induced to invoke these tools. Commit 88c77fc fixes these vulnerabilities.

Affected products (as reported)

Vendor	Product	Versions
Klarso GmbH	neo-mjs	0 – before 88c77fc4

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected products (as reported)

References