CVE-2026-119025
open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.
| CWE | CWE-78 |
| Vendor | sindresorhus |
| Product | open |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for sindresorhus open
Be the first to know when new high vulnerabilities affecting sindresorhus open are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
sindresorhus / open
7.2.0 < 11.0.0
modelcontextprotocol / inspector
2.0.0 < 2.12.0
anomalyco / opencode
1.0.137 < 1.18.33
References
github.com: https://github.com/sindresorhus/open/commit/274d70446bf38a7b7d50b214dd3962ef8ea9320d github.com: https://github.com/sindresorhus/open/releases/tag/v11.0.0 github.com: https://github.com/sindresorhus/open/blob/v10.2.0/index.js#L189-L203 github.com: https://github.com/sindresorhus/open/blob/v7.2.0/index.js#L60-L99 github.com: https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-q978-78c7-phqw github.com: https://github.com/anomalyco/opencode/pull/51414 github.com: https://github.com/anomalyco/opencode/commit/29f07e0c69ad8668e0e15b0eb54f2fcb342af98c vulncheck.com: https://www.vulncheck.com/advisories/open-7.2.0-before-11.0.0-os-command-injection-via-powershell-on-windows
Credits
Eilon Cohen (Pillar Security)