Is there a public PoC exploit available for EUVD-2026-19170?

Yes, a public proof-of-concept exploit is available for EUVD-2026-19170. Prioritise patching immediately. EPSS: 0.3%.

Vale Mcp EUVD-2026-19170

Q: What is the CVSS score of EUVD-2026-19170?

EUVD-2026-19170 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

| CVE-2026-5621 LOW

OS Command Injection (CWE-78)

2026-04-06 VulDB

GHSA-2j8h-v2cv-qh49

Command Injection Vale Mcp

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.8 (MEDIUM) 1.9 (LOW)

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 06, 2026 - 04:45 euvd

EUVD-2026-19170

Analysis Generated

Apr 06, 2026 - 04:45 vuln.today

CVE Published

Apr 06, 2026 - 04:15 nvd

MEDIUM 4.8

DescriptionCVE.org

A vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0. Affected by this vulnerability is an unknown functionality of the file src/index.ts of the component HTTP Interface. The manipulation of the argument config_path results in os command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Local command injection in ChrisChinchilla Vale-MCP up to version 0.1.0 allows authenticated local attackers to execute arbitrary OS commands via manipulation of the config_path argument in the HTTP Interface component (src/index.ts). The vulnerability requires local access and valid user privileges, with publicly available exploit code disclosed after vendor non-response, representing a moderate-risk issue in environments where the MCP tool is deployed with local user access.

Technical ContextAI

Vale-MCP is a model context protocol implementation for the Vale prose style checker. The vulnerability exists in the HTTP Interface handler (src/index.ts) where user-supplied input via the config_path parameter is passed unsanitized to OS command execution functions, allowing shell metacharacter injection. This is a classic CWE-78 (Improper Neutralization of Special Elements used in an OS Command) failure where input validation or output encoding is absent. The affected CPE range (cpe:2.3:a:chrischinchilla:vale-mcp:*:*:*:*:*:*:*:*) indicates all versions up to and including 0.1.0 are vulnerable. The HTTP Interface exposes this functionality as a network-accessible endpoint, though exploitation requires prior local authentication and privilege level.

RemediationAI

No vendor-released patched version has been independently confirmed from the available data. Users should discontinue use of Vale-MCP versions up to 0.1.0 until a security fix is released. As an interim measure, restrict HTTP Interface access to trusted local users only, implement network-level access controls (e.g., firewall rules) to limit connections to localhost, and sanitize or validate the config_path input parameter if modifying the source code. Monitor for updates at the project repository (https://github.com/wing3e/public_exp/issues/27 documents the exploit). If Vale-MCP is critical to workflow, evaluate alternative prose checkers (e.g., Vale without MCP integration) or delay deployment until vendor confirms remediation.