THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19329 (MEDIUM 5.3) — A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection

[NVD] CVE-2026-19329 (MEDIUM 5.3) — A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection

highnvdPublished 2026-08-09

CVE-2026-19329 CVSS: 5.3 MEDIUM Published: 2026-08-09T04:17:37.780

A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection. The attack requires a local approach. This product

Indicators of compromise

1ff521cc6cc57cfe56ddef946c644b8534771390sha1
CVE-2026-19329cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19329