7.8Yüksek
hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools
masc-ucsc hagent
hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools. Attackers or prompt-injected agent…