CVE-2026-2130
BurtTheCoder mcp-maigret search_username index.ts command injection
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.12. This affects an unknown part of the file src/index.ts of the component search_username. Executing a manipulation of the argument Username can lead to command injection. The attack may be launched remotely. Upgrading to version 1.0.13 is able to mitigate this issue. This patch is called b1ae073c4b3e789ab8de36dc6ca8111ae9399e7a. Upgrading the affected component is advised.
| CWE | CWE-77 CWE-74 |
| Vendor | burtthecoder |
| Product | mcp-maigret |
| Published | Feb 8, 2026 |
| Last Updated | Feb 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for burtthecoder mcp-maigret
Be the first to know when new medium vulnerabilities affecting burtthecoder mcp-maigret are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
BurtTheCoder / mcp-maigret
1.0.0 1.0.1 1.0.2 1.0.3 1.0.4 1.0.5 1.0.6 1.0.7 1.0.8 1.0.9 1.0.10 1.0.11 1.0.12
References
vuldb.com: https://vuldb.com/?id.344765 vuldb.com: https://vuldb.com/?ctiid.344765 vuldb.com: https://vuldb.com/?submit.747171 github.com: https://github.com/BurtTheCoder/mcp-maigret/issues/9 github.com: https://github.com/BurtTheCoder/mcp-maigret/pull/10 github.com: https://github.com/BurtTheCoder/mcp-maigret/commit/b1ae073c4b3e789ab8de36dc6ca8111ae9399e7a github.com: https://github.com/BurtTheCoder/mcp-maigret/releases/tag/v1.0.13 github.com: https://github.com/BurtTheCoder/mcp-maigret/
Credits
🔍 Lexpl0it (VulDB User)