by Kastro
Paper/Archive/CVE-2026-18482

CVE-2026-18482

Klarso GmbH neo-mjs — CVE-2026-18482

EPSS 3%public exploitCVSS 9.8
critical.is priorityof 100
57
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 88.9.889 × 2017.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS command execution when an AI agent is induced to invoke these tools. Commit 88c77fc fixes these vulnerabilities.

Affected

ProductAffectedFixed inSource
neo-mjs< 88c77fc488c77fc4CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/neomjs/neo/commit/5acc564ea1b278bca5fab1f8f397a6ba9b849d75refgithub.com/neomjs/neo/commit/88c77fc4exploitnovice-22.com/posts/neo-mjs