Read the docs

ai-sdlc-framework

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ai-sdlc-framework records in CISA KEV

No ai-sdlc-framework vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-81162 CVE-2026-117558 · GHSA-f89j-j8x9-5xwf

OS command injection in ai-sdlc MCP Server via repo argument

Priority HIGH 72

The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00687 Published 2026-10-27 No fix listed CWE-78
Open these records in search →