CVE-2026-7642

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

6.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L                                    

Vulnerability Description

A vulnerability was detected in pskill9 website-downloader up to 0.1.0. This affects the function download_website of the file src/index.ts of the component MCP Interface. Performing a manipulation of the argument outputPath results in os command injection. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability Details

Published Date

May 02, 2026

Last Modified

May 02, 2026

CWE ID

CWE-77

Source

NVD

External References

https://github.com/BruceJqs/public_exp/issues/31
https://github.com/pskill9/website-downloader/
https://github.com/pskill9/website-downloader/issues/7
https://vuldb.com/submit/806812
https://vuldb.com/vuln/360754
https://vuldb.com/vuln/360754/cti

CVE-2026-7642

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment