CVE-2026-23882
Published: 23 March 2026
Summary
CVE-2026-23882 is a high-severity OS Command Injection (CWE-78) vulnerability in Blinko Blinko. Its CVSS base score is 8.6 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 28.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Protocol-Specific Risks risk domain.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2026-23882 is a command injection vulnerability (CWE-78) in Blinko, an AI-powered card note-taking project. In versions prior to 1.8.4, the MCP (Model Context Protocol) server creation function allows users to specify arbitrary commands and arguments, which are executed when testing the connection. The vulnerability carries a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Attackers with high privileges (PR:H), such as authenticated users with elevated access, can exploit this over the network with low complexity and no user interaction required. Successful exploitation enables arbitrary command execution on the target system, resulting in high impacts to confidentiality, integrity, and availability.
The issue has been patched in Blinko version 1.8.4. Mitigation involves updating to this version or later. Details are provided in the GitHub security advisory (GHSA-59r2-82p8-c56v), release notes for v1.8.4, and the patching commit (bef6b770743e87c630db2d00d7049dabd96bfe85).
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-14545
Vulnerability details
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the MCP (Model Context Protocol) server creation function allows specifying arbitrary commands and arguments, which are executed when testing the connection. This issue has been patched in version 1.8.4.
- CWE(s)
AI Security AnalysisAI
- AI Category
- AI Agent Protocols and Integrations
- Risk Domain
- Protocol-Specific Risks
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: ai, mcp, model context protocol
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Command injection (CWE-78) in server function enables network-based arbitrary command execution as high-priv user, directly facilitating T1190 (public-facing app exploitation) and T1059 (command/script interpreter abuse).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
SI-10 requires validation of information inputs to the MCP server creation function, directly preventing arbitrary command injection by rejecting malicious commands and arguments.
SI-2 ensures timely identification, reporting, and correction of flaws like this command injection vulnerability through patching to Blinko v1.8.4.
AC-6 enforces least privilege, limiting the high-privilege (PR:H) access needed to exploit the MCP server creation function for command injection.