CVE-2026-7600 | ArtMin96 yii2-mcp-server 1.0.2 MCP Interface src/index.ts yii_command_help/yii_execute_command os command injection

A vulnerability classified as critical was found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of the file src/index.ts of the component MCP Interface. Executing a manipulation can lead to os command injection.

This vulnerability is handled as CVE-2026-7600. The attack can be executed remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.