Vulnerability · Published Apr 26, 2026 · Assigned by VulDB

CVE-2026-7061Toowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection

High 7.3

In plain English

A high-severity OS command injection in chatgpt-mcp-server from Toowiredd. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)1.5%top 25.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by this issue is some unknown functionality of the file src/services/docker.service.ts of the component MCP/HTTP. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Affected products (as reported)

Vendor	Product	Versions
Toowiredd	chatgpt-mcp-server	0.1.0

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-359636 | Toowiredd chatgpt-mcp-server MCP/HTTP docker.service.ts os command injection vdb-entry
VDB-359636 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #798613 | Toowiredd chatgpt-mcp-server 0.1.0 OS Command Injection third-party-advisory
https://github.com/Toowiredd/chatgpt-mcp-server/issues/8 issue-tracking
https://github.com/wing3e/public_exp/issues/28 exploit, issue-tracking
https://github.com/Toowiredd/chatgpt-mcp-server/ product