CVE-2026-5619 | Braffolk mcp-summarization-functions up to 0.1.5 summarize_command src/server/mcp-server.ts os command injection

A vulnerability was found in Braffolk mcp-summarization-functions up to 0.1.5 and classified as critical. This impacts an unknown function of the file src/server/mcp-server.ts of the component summarize_command. Executing a manipulation of the argument command can lead to os command injection.

This vulnerability appears as CVE-2026-5619. The attack requires local access. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.