CVE-2026-6942

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2_cmd_str(). Attackers can inject shell metacharacters through the jsonrpc interface parameters to achieve remote code execution on the host running radare2-mcp without requiring authentication.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Apr 23, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-694207.8Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.CVE-2026-694217.8Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.CVE-2026-694227.0Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.CVE-2026-694238.0Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.CVE-2026-694247.8Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.CVE-2026-694254.7Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.CVE-2026-694267.8Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.CVE-2026-694278.0Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.CVE-2026-694287.5Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.CVE-2026-694297.5Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.CVE-2026-694307.0Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.CVE-2026-694319.8Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.
CVE-2026-6942: High severity, CVSS 8.8 | Vulnix