CVE-2026-19281

MEDIUM 5.3

adolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts generateChart command injection

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack is only possible with local access. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-77 CWE-74
Vendor	adolfosalasgomez3011
Product	slidev-builder-mcp
Published	Aug 8, 2026

Stay Ahead of the Next One

Get instant alerts for adolfosalasgomez3011 slidev-builder-mcp

Be the first to know when new medium vulnerabilities affecting adolfosalasgomez3011 slidev-builder-mcp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

adolfosalasgomez3011 / slidev-builder-mcp

2.1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/387022 vuldb.com: https://vuldb.com/vuln/387022/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19281 vuldb.com: https://vuldb.com/submit/865225 github.com: https://github.com/adolfosalasgomez3011/slidev-builder-mcp/issues/1 github.com: https://github.com/adolfosalasgomez3011/slidev-builder-mcp/

Credits

🔍 gongyanyu02 (VulDB User) VulDB CNA Team