Is there a public PoC exploit available for CVE-2026-7443?

Yes, a public proof-of-concept exploit is available for CVE-2026-7443. Prioritise patching immediately. EPSS: 0.8%.

mcp-dnstwist CVE-2026-7443

Q: What is the CVSS score of CVE-2026-7443?

CVE-2026-7443 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

MEDIUM

OS Command Injection (CWE-78)

2026-04-29 VulDB

Command Injection Mcp Dnstwist

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.8 CRITICAL

OS command injection with no auth requirement over network enables arbitrary command execution, warranting High across all impact metrics regardless of service context.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 01:19 vuln.today

PoC Detected

Apr 30, 2026 - 14:52 vuln.today

Public exploit code

Severity Changed

Apr 29, 2026 - 23:22 NVD

HIGH MEDIUM

CVSS changed

Apr 29, 2026 - 23:22 NVD

7.3 (HIGH) 5.5 (MEDIUM)

CVE Published

Apr 29, 2026 - 22:45 nvd

MEDIUM 5.5

DescriptionCVE.org

A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerability is the function fuzz_domain of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument Request can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

OS command injection in BurtTheCoder mcp-dnstwist through version 1.0.4 allows remote attackers to execute arbitrary operating system commands by manipulating the domain argument passed to the fuzz_domain function in the MCP Interface. Publicly available exploit code exists (hosted on GitHub), and SSVC classifies this as automatable with a poc-level exploitation status. No vendor patch has been released, as the project maintainer has not responded to the coordinated disclosure filed via GitHub issue.

Technical ContextAI

mcp-dnstwist is a Model Context Protocol (MCP) server that wraps the dnstwist command-line tool, enabling AI agents and LLM-connected clients to perform domain fuzzing and typosquatting analysis via the MCP interface. The vulnerable component is the fuzz_domain function in src/index.ts (CPE: cpe:2.3:a:burtthecoder:mcp-dnstwist:*:*:*:*:*:*:*:*), which constructs an OS-level command using attacker-controlled Request arguments without adequate sanitization or escaping. CWE-78 (Improper Neutralization of Special Elements used in an OS Command) identifies the root cause: unsanitized user input is concatenated into a shell command, allowing injection of arbitrary shell metacharacters (e.g., semicolons, backticks, pipe operators) that the underlying shell interprets as command separators or substitutions.

RemediationAI

No vendor-released patch is available at time of analysis - the project maintainer has not responded to the disclosure issue filed at https://github.com/BurtTheCoder/mcp-dnstwist/issues/13. Users should immediately consider removing or replacing this MCP server with an alternative domain fuzzing integration until a patched release is published. As a primary compensating control, restrict network access to the MCP interface to trusted localhost or loopback addresses only, preventing remote exploitation - note this does not eliminate risk if the threat model includes local code execution by untrusted processes. As a secondary control, run the mcp-dnstwist process under a minimally privileged OS user account with restricted filesystem permissions, limiting the blast radius of any successful injection. Disabling the fuzz_domain tool endpoint entirely within the MCP configuration eliminates the attack surface if domain fuzzing functionality is not required. Monitor the upstream GitHub repository and VulDB entry at https://vuldb.com/vuln/360185 for patch availability.