What is the CVSS score of CVE-2026-23882?

CVE-2026-23882 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Blinko are affected by CVE-2026-23882?

Blinko versions before 1.8.4 contain a critical remote code execution vulnerability allowing authenticated administrators to execute arbitrary system commands through the MCP server testing function,…. A patch is available.

How to fix or mitigate CVE-2026-23882?

Within 24 hours: Identify all Blinko installations and document current version numbers; audit administrative user accounts and access logs for suspicious activity. Within 7 days: Upgrade all Blinko instances to version 1.8.4 or later; revoke or rotate credentials for all administrative accounts as a precautionary measure. Within 30 days: Implement principle-of-least-privilege controls limiting administrative access; enable logging and monitoring on MCP server creation activities; conduct forensic analysis of access logs for the past 90 days to detect exploitation attempts.

Blinko CVE-2026-23882

EUVD-2026-14545 HIGH

OS Command Injection (CWE-78)

2026-03-23 GitHub_M

Command Injection Blinko Blinkospace

7.2

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:18 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

1.8.4

EUVD ID Assigned

Mar 23, 2026 - 21:00 euvd

EUVD-2026-14545

Analysis Generated

Mar 23, 2026 - 21:00 vuln.today

CVE Published

Mar 23, 2026 - 20:52 nvd

HIGH 7.2

DescriptionGitHub Advisory

Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP (Model Context Protocol) server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4.

AnalysisAI

Blinko versions prior to 1.8.4 allow authenticated high-privilege users to execute arbitrary commands through the MCP server creation function during connection testing, resulting in complete system compromise. An attacker with administrative credentials can inject malicious commands that execute with application privileges, achieving remote code execution. No patch is currently available for affected deployments.

Technical ContextAI

This vulnerability affects Blinko (cpe:2.3:a:blinkospace:blinko:*:*:*:*:*:*:*:*), specifically the Model Context Protocol (MCP) server creation functionality. The root cause is a classic command injection flaw (CWE-78), where external input used to construct operating system commands is not properly sanitized or validated. When administrators create or test MCP server connections, the application passes user-controlled command strings and arguments directly to system execution functions, allowing injection of arbitrary OS commands. The MCP server integration appears to be part of Blinko's AI functionality, where server configurations require command specification for initialization or health checks.

RemediationAI

Upgrade Blinko to version 1.8.4 or later, which contains a patch for this command injection vulnerability as documented in the release notes at https://github.com/blinkospace/blinko/releases/tag/1.8.4 and commit bef6b770743e87c630db2d00d7049dabd96bfe85. Organizations unable to immediately upgrade should restrict administrative access to the Blinko application, implement additional authentication controls for MCP server creation functions, and monitor system logs for suspicious command execution patterns. Network segmentation should be enforced to limit potential impact if administrative credentials are compromised and command injection is achieved.