Which versions of Codebase Mcp are affected by CVE-2026-5023?

Organizations using DeDeveloper23 codebase-mcp should be aware of moderate risk from CVE-2026-5023, a OS command injection vulnerability rated CVSS 4.8.

Is there a public PoC exploit available for CVE-2026-5023?

Yes, a public proof-of-concept exploit is available for CVE-2026-5023. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2026-5023?

Within 30 days: Identify affected systems running DeDeveloper23 codebase-mcp and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Codebase Mcp CVE-2026-5023

Q: What is the CVSS score of CVE-2026-5023?

CVE-2026-5023 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-16966 LOW

OS Command Injection (CWE-78)

2026-03-29 VulDB

GHSA-cm69-52gj-g4j6

Command Injection Codebase Mcp

1.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.8 (MEDIUM) 1.9 (LOW)

PoC Detected

Mar 30, 2026 - 13:26 vuln.today

Public exploit code

EUVD ID Assigned

Mar 29, 2026 - 02:15 euvd

EUVD-2026-16966

Analysis Generated

Mar 29, 2026 - 02:15 vuln.today

CVE Published

Mar 29, 2026 - 02:00 nvd

MEDIUM 4.8

DescriptionCVE.org

A vulnerability has been found in DeDeveloper23 codebase-mcp up to 3ec749d237dd8eabbeef48657cf917275792fde6. This vulnerability affects the function getCodebase/getRemoteCodebase/saveCodebase of the file src/tools/codebase.ts of the component RepoMix Command Handler. Such manipulation leads to os command injection. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

OS command injection in DeDeveloper23 codebase-mcp allows local authenticated attackers to execute arbitrary system commands through the getCodebase, getRemoteCodebase, and saveCodebase functions in src/tools/codebase.ts. The vulnerability affects all versions up to commit 3ec749d237dd8eabbeef48657cf917275792fde6, with publicly available exploit code disclosed via GitHub issue #7. Given the local attack requirement and authenticated privilege escalation prerequisite (PR:L), real-world exploitation requires an already-compromised local account with legitimate tool access, though EPSS score of 5.3 reflects moderate practical risk in shared development environments.

Technical ContextAI

The vulnerability resides in the RepoMix Command Handler component, specifically within the codebase.ts file's functions that handle repository operations. CWE-78 (Improper Neutralization of Special Elements used in an OS Command) indicates that user-controlled input is passed unsanitized to OS command execution functions (likely shell() or exec() calls in a Node.js/TypeScript context). The codebase-mcp project implements a rolling release model without semantic versioning, meaning affected and patched versions cannot be precisely delineated; the vulnerability is tied to a specific commit hash (3ec749d237dd8eabbeef48657cf917275792fde6) rather than a version number. The CPE notation :*:*:*:*:*:*:*:* reflects this lack of version specificity in vendor tracking.

RemediationAI

No vendor-released patch identified at time of analysis due to the project's rolling-release model and lack of vendor response to the early disclosure. Users should immediately audit their local codebase-mcp installation by checking the current commit hash against the vulnerable version (3ec749d237dd8eabbeef48657cf917275792fde6); if at or before this commit, update to the latest version available in the repository. Primary mitigation involves restricting local access to systems running codebase-mcp and limiting user privileges to the minimum required for intended functionality. The repository should be monitored for commits addressing CWE-78 input validation; review the GitHub issue #7 (https://github.com/DeDeveloper23/codebase-mcp/issues/7) for community-proposed patches or workarounds. As a temporary measure, consider input validation patches applied locally or sandboxing the tool in a restricted execution environment until official remediation is available.