CVE-2026-7211
Published: 28 April 2026
Summary
CVE-2026-7211 is a medium-severity Injection (CWE-74) vulnerability. Its CVSS base score is 5.5 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 15.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Protocol-Specific Risks risk domain.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
A weakness has been identified in dvladimirov MCP up to version 0.1.0 within the Git Search API component. Specifically, the GitSearchRequest function in mcp_server.py is vulnerable to command injection through manipulation of the repo_url or pattern arguments, as classified under CWE-74 and CWE-77. The issue received a CVSS 4.0 score of 5.5 reflecting network-accessible attack vectors with low complexity.
An unauthenticated remote attacker can supply crafted input to the affected parameters and execute arbitrary commands on the server. A public exploit for this flaw has already been released, enabling straightforward reproduction and potential use in attacks against exposed instances.
The project maintainers were notified via an issue report on the GitHub repository but have not issued a response or patch. Reference materials, including the repository at github.com/dvladimirov/MCP and the associated Vuldb entries, document the disclosure and technical details without providing mitigation guidance.
EPSS scores have remained low and essentially flat, moving only from 0.0212 to a peak of 0.0218.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-25964
Vulnerability details
A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcp_server.py of the component Git Search API. Executing a manipulation of the argument repo_url/pattern can lead to command injection.…
more
The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
- CWE(s)
AI Security AnalysisAI
- AI Category
- AI Agent Protocols and Integrations
- Risk Domain
- Protocol-Specific Risks
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: mcp
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Command injection in public-facing Git Search API enables T1190 (Exploit Public-Facing Application) for remote unauthenticated RCE; directly facilitates T1059 (Command and Scripting Interpreter) for arbitrary command execution on the server.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
SI-10 mandates information input validation at entry points like the GitSearchRequest function, directly preventing command injection via manipulated repo_url/pattern arguments.
SI-2 requires identification, reporting, and correction of flaws in system components, directly addressing remediation of this known command injection vulnerability.
AC-6 enforces least privilege for processes handling the Git Search API, limiting the scope and impact of arbitrary commands injected through repo_url/pattern.