Read the docs

atxp

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

atxp records in CISA KEV

No atxp vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 40

ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00652 Published 2026-10-27 No fix listed CWE-78
Open these records in search →