EUVD-2026-65092
GHSA-w4rf-x2r6-4q2w
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local access and low-privilege account required to reach the tool handler; limited, unchanged-scope impact across confidentiality, integrity, and availability.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
OS command injection in sworddut mcp-ffmpeg-helper affects the handleToolCall function in src/tools/handlers.ts across all three released versions (0.1.0, 0.1.1, 0.2.1), allowing a local low-privilege attacker to execute arbitrary OS commands by manipulating the format argument. Publicly available exploit code exists via a GitHub issue, and the vendor has not responded to the coordinated disclosure, leaving all known versions unpatched. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local access to the system running mcp-ffmpeg-helper (AV:L) and at least a low-privilege user account capable of invoking the tool's MCP interface (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 4.8 (Medium) with E:P (exploit maturity: proof-of-concept) accurately reflects the constrained threat model. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A low-privilege local user on a system running mcp-ffmpeg-helper invokes the handleToolCall function with a crafted format argument containing shell metacharacters (e.g., semicolons, backticks, or pipe characters) to break out of the intended ffmpeg command context. The injected payload executes in the process's security context, enabling file read/write or lateral movement within the system's permission boundaries. … |
| Remediation | No vendor-released patch identified at time of analysis - the project was notified via GitHub issue but has not responded. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today