A vulnerability has been found in hypermodel-labs mcp-server-auto-commit 1.0.0 and classified as critical. Affected by this vulnerability is the function
getGitChanges of the file index.ts. This manipulation causes command injection.
The identification of this vulnerability is CVE-2026-4198. The attack can only be executed locally. Furthermore, there is an exploit available.
Applying a patch is the recommended action to fix this issue.
The project was informed of the problem early through an issue report but has not responded yet.
