Is there a public PoC exploit available for CVE-2026-5833?

Yes, a public proof-of-concept exploit is available for CVE-2026-5833. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-5833?

Yes, a patch is available for CVE-2026-5833. Update the affected software to the latest version immediately.

Mcp Server Taskwarrior CVE-2026-5833

Q: What is the CVSS score of CVE-2026-5833?

CVE-2026-5833 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-20841 LOW

Command Injection (CWE-77)

2026-04-09 VulDB

GHSA-95hg-3c55-xf9x

Command Injection Mcp Server Taskwarrior

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.8 (MEDIUM) 1.9 (LOW)

PoC Detected

Apr 09, 2026 - 04:17 vuln.today

Public exploit code

EUVD ID Assigned

Apr 09, 2026 - 03:30 euvd

EUVD-2026-20841

Analysis Generated

Apr 09, 2026 - 03:30 vuln.today

Patch released

Apr 09, 2026 - 03:30 nvd

Patch available

CVE Published

Apr 09, 2026 - 02:15 nvd

MEDIUM 4.8

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on mcp-server-taskwarrior (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 1.0.1.

DescriptionCVE.org

A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation of the argument Identifier leads to command injection. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The name of the patch is 1ee3d282debfa0a99afeb41d22c4b2fd5a3148f2. Applying a patch is advised to resolve this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

AnalysisAI

Command injection in awwaiid mcp-server-taskwarrior up to version 1.0.1 allows local authenticated attackers to execute arbitrary system commands via manipulation of the Identifier argument in the server.setRequestHandler function of index.ts. Publicly available exploit code exists, and the vendor has released a patched version following responsible disclosure practices. This is a locally-exploitable vulnerability requiring authenticated access with moderate CVSS severity (5.3), but the presence of public exploit code and low attack complexity elevates practical risk.

Technical ContextAI

The vulnerability exists in the request handler implementation of mcp-server-taskwarrior, a Model Context Protocol server for Taskwarrior task management. The root cause is improper input sanitization of the Identifier parameter (CWE-77: Improper Neutralization of Special Elements used in a Command), allowing an attacker to inject shell metacharacters or command sequences. The flaw resides in the index.ts file where user-supplied input is passed unsanitized to command execution functions. The affected software is identified by CPE cpe:2.3:a:awwaiid:mcp-server-taskwarrior:*:*:*:*:*:*:*:*, indicating all versions through 1.0.1 are vulnerable. The MCP (Model Context Protocol) architecture means this server likely integrates with AI/LLM applications, potentially expanding the attack surface if accessed through untrusted client connections.

RemediationAI

Vendor-released patch: upgrade to the version incorporating commit 1ee3d282debfa0a99afeb41d22c4b2fd5a3148f2, which sanitizes the Identifier argument before passing it to command execution functions. The vendor released a fixed version following the security report. Users should update their mcp-server-taskwarrior installation to the patched release immediately. No formal workaround for unpatched systems is documented; the primary remediation is to apply the vendor's patch. Patch details and the fix commit are accessible via https://github.com/awwaiid/mcp-server-taskwarrior/commit/1ee3d282debfa0a99afeb41d22c4b2fd5a3148f2.