by Kastro
Paper/Archive/CVE-2026-91988

CVE-2026-91988

dep0we atomic-agents-stack — atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP

EPSS 0.3%CVSS 9.2
critical.is priorityof 100
33
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 24.8.248 × 205.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spawned as local subprocesses by MCPClientPool to achieve code execution on the agent host.

Affected

ProductAffectedFixed inSource
atomic-agents-stack< 1.1.01.1.0CNA

Scores by source

VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VulnCheck (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygithub.com/dep0we/atomic-agents-stack/security/advisories/GHSA-xhcr-cqfr-m3hvwriteupvulncheck.com/advisories/atomic-agents-stack-before-1.1.0-remote-code-execution-via-http-mcp