CVE-2026-5125

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5125", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-30T07:55:02.890Z", "datePublished": "2026-03-30T17:00:13.107Z", "dateUpdated": "2026-03-31T18:05:27.423Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-30T17:00:13.107Z"}, "title": "raine consult-llm-mcp server.ts child_process.execSync os command injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-78", "lang": "en", "description": "OS Command Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-77", "lang": "en", "description": "Command Injection"}]}], "affected": [{"vendor": "raine", "product": "consult-llm-mcp", "versions": [{"version": "2.5.0", "status": "affected"}, {"version": "2.5.1", "status": "affected"}, {"version": "2.5.2", "status": "affected"}, {"version": "2.5.3", "status": "affected"}, {"version": "2.5.4", "status": "unaffected"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation of the argument git_diff.base_ref/git_diff.files results in os command injection. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 2.5.4 addresses this issue. The patch is identified as 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3. Upgrading the affected component is recommended."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4.3, "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-03-30T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-30T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-30T10:00:07.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Yinci Chen (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/354157", "name": "VDB-354157 | raine consult-llm-mcp server.ts child_process.execSync os command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/354157/cti", "name": "VDB-354157 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/780154", "name": "Submit #780154 | raine consult-llm-mcp <=2.5.3 Command Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/raine/consult-llm-mcp/issues/6", "tags": ["issue-tracking"]}, {"url": "https://github.com/user-attachments/files/25821105/consult-llm-mcp_bug.pdf", "tags": ["exploit"]}, {"url": "https://github.com/raine/consult-llm-mcp/commit/4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3", "tags": ["patch"]}, {"url": "https://github.com/raine/consult-llm-mcp/releases/tag/v2.5.4", "tags": ["patch"]}, {"url": "https://github.com/raine/consult-llm-mcp/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-31T16:16:45.193602Z", "id": "CVE-2026-5125", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-31T18:05:27.423Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"tags": ["x_open-source"], "title": "raine consult-llm-mcp server.ts child_process.execSync os command injection", "credits": [{"lang": "en", "type": "reporter", "value": "Yinci Chen (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4.3, "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "raine", "product": "consult-llm-mcp", "versions": [{"status": "affected", "version": "2.5.0"}, {"status": "affected", "version": "2.5.1"}, {"status": "affected", "version": "2.5.2"}, {"status": "affected", "version": "2.5.3"}, {"status": "unaffected", "version": "2.5.4"}]}], "timeline": [{"lang": "en", "time": "2026-03-30T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-30T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-30T10:00:07.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/354157", "name": "VDB-354157 | raine consult-llm-mcp server.ts child_process.execSync os command injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/354157/cti", "name": "VDB-354157 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/780154", "name": "Submit #780154 | raine consult-llm-mcp <=2.5.3 Command Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/raine/consult-llm-mcp/issues/6", "tags": ["issue-tracking"]}, {"url": "https://github.com/user-attachments/files/25821105/consult-llm-mcp_bug.pdf", "tags": ["exploit"]}, {"url": "https://github.com/raine/consult-llm-mcp/commit/4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3", "tags": ["patch"]}, {"url": "https://github.com/raine/consult-llm-mcp/releases/tag/v2.5.4", "tags": ["patch"]}, {"url": "https://github.com/raine/consult-llm-mcp/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation of the argument git_diff.base_ref/git_diff.files results in os command injection. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 2.5.4 addresses this issue. The patch is identified as 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3. Upgrading the affected component is recommended."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "OS Command Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "Command Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-30T17:00:13.107Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5125", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-31T16:16:45.193602Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-03-31T16:16:48.582Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-5125", "state": "PUBLISHED", "dateUpdated": "2026-03-30T17:00:13.107Z", "dateReserved": "2026-03-30T07:55:02.890Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-30T17:00:13.107Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "consult-llm-mcp", "vendor": "raine", "versions": [{"status": "affected", "version": "2.5.0"}, {"status": "affected", "version": "2.5.1"}, {"status": "affected", "version": "2.5.2"}, {"status": "affected", "version": "2.5.3"}, {"status": "unaffected", "version": "2.5.4"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation of the argument git_diff.base_ref/git_diff.files results in os command injection. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 2.5.4 addresses this issue. The patch is identified as 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3. Upgrading the affected component is recommended."}, {"lang": "es", "value": "Una vulnerabilidad fue detectada en raine consult-llm-mcp hasta 2.5.3. Afectada por esta vulnerabilidad es la funci\u00f3n child_process.execSync del archivo src/server.ts. La manipulaci\u00f3n del argumento git_diff.base_ref/git_diff.files resulta en inyecci\u00f3n de comandos del sistema operativo. El ataque solo es posible con acceso local. El exploit ahora es p\u00fablico y puede ser utilizado. La actualizaci\u00f3n a la versi\u00f3n 2.5.4 soluciona este problema. El parche se identifica como 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3. Se recomienda actualizar el componente afectado."}], "id": "CVE-2026-5125", "lastModified": "2026-06-17T10:58:28.760", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5125", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-31T16:16:45.193602Z", "version": "2.0.3"}}]}, "published": "2026-03-30T18:16:20.220", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/raine/consult-llm-mcp/"}, {"source": "cna@vuldb.com", "url": "https://github.com/raine/consult-llm-mcp/commit/4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3"}, {"source": "cna@vuldb.com", "url": "https://github.com/raine/consult-llm-mcp/issues/6"}, {"source": "cna@vuldb.com", "url": "https://github.com/raine/consult-llm-mcp/releases/tag/v2.5.4"}, {"source": "cna@vuldb.com", "url": "https://github.com/user-attachments/files/25821105/consult-llm-mcp_bug.pdf"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/780154"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/354157"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/354157/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}, {"lang": "en", "value": "CWE-78"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.5.3"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "2.5.4"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "consult-llm-mcp", "source": "cna", "vendor": "raine"}, "product": "consult-llm-mcp", "vendor": "raine"}], "analysis": {"en": {"generated_at": "2026-03-30T18:21:51.614846+00:00", "value": {"mitigation_remediation": ["Upgrade raine consult-llm-mcp to version 2.5.4 or later, which includes the commit 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3 that removes the unvalidated command execution.", "Verify that the application no longer uses child_process.execSync with unsanitized inputs in the server.ts code; if a custom deployment is in use, apply the same sanitization or remove the vulnerable call."], "summary": {"action": "Patch", "impact": "OS Command Injection via server child_process.execSync enabling arbitrary local command execution"}, "threat_synthesis": {"affected_systems": "The issue affects the raine consult-llm-mcp product, specifically any deployment running a version prior to 2.5.4. Upgrading to release 2.5.4 or later incorporates the fix identified by commit 4abf297b34e5e8a9cb364b35f52c5f0ca1d599d3. Users running older releases should identify whether their systems include the vulnerable server.ts implementation and then apply the upgrade.", "description_and_impact": "The vulnerability lies in the child_process.execSync call within src/server.ts where unvalidated git_diff.base_ref and git_diff.files values are passed to an operating system shell. This flaw permits OS command injection, which can lead to execution of arbitrary commands on the host system. The weakness is a classic command injection issue classified under CWE-77 and CWE-78. The impact is limited to local actors who can interact with the server, allowing them to run potentially destructive commands and compromise local confidentiality, integrity, or availability. The affected function is exposed in raine consult-llm-mcp up to version 2.5.3.", "risk_and_exploitability": "With a CVSS score of 4.8 the vulnerability is considered moderate; it requires local access, and the exploit is publicly available. Although the EPSS score and KEV status are not listed, the public nature of the exploit and the fact that it can be triggered with any local user privilege level elevate the risk for environments where the application runs with elevated permissions. Mitigation through patching remains the most effective countermeasure."}}}}, "created": "2026-03-30T20:55:27.292949+00:00", "updated": "2026-03-31T20:40:37.419933+00:00", "vendors": ["raine", "raine$PRODUCT$consult-llm-mcp"]}