GHSA-5226-3rvg-hp4x
Medium · 6.3CVSS
6.3
EPSS
—
Published
Apr 2, 2026
CISA due date
—
The record
fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | fast-filesystem-mcp | 0 | No fix |
Related vulnerabilities
- CVE-2026-5327 A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. Same vulnerability
- GHSA-j893-m93w-jwjw fast-filesystem-mcp has a Path Traversal vulnerability Also affects fast-filesystem-mcp
- CVE-2025-67364 fast-filesystem-mcp has a Path Traversal vulnerability Also affects fast-filesystem-mcp
- CVE-2026-114577 A vulnerability was found in oretnom23 php-travel-agency-system. CWE-74
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-74
- CVE-2026-112150 A security flaw has been discovered in vraj404 Criminal-Management-System up to… CWE-74
- CVE-2026-112141 A vulnerability was determined in satya-vinay Events-Management-System up to… CWE-74
- CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. CWE-74