CVE-2026-3484 | PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38 Nmap CLI Command src/index.ts child_process.exec command injection

A vulnerability classified as critical was found in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function child_process.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection.

This vulnerability was named CVE-2026-3484. The attack may be performed from remote. There is no available exploit.

This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. It is best practice to apply a patch to resolve this issue.