CVE-2026-117560

HIGH 7.8

ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS content to inject $() or backtick substitutions into parameters like message_id, subject, or query, running commands as the user.

CWE	CWE-78
Vendor	atxp
Product	gemini-cli-extension
Published	Oct 27, 2026

Stay Ahead of the Next One

Get instant alerts for atxp gemini-cli-extension

Be the first to know when new high vulnerabilities affecting atxp gemini-cli-extension are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

atxp / gemini-cli-extension

0 ≤ 1.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/atxp-dev/atxp/issues/15 github.com: https://github.com/atxp-dev/atxp github.com: https://github.com/atxp-dev/atxp/blob/4e88b0282b51ae7c22ea1b6ca4476a39298299ff/src/server.ts#L28-L40 vulncheck.com: https://www.vulncheck.com/advisories/atxp-gemini-cli-extension-through-1.0.0-os-command-injection-via-mcp-tools

Credits

Nguyễn Văn Tiến