TI-2026-81172 CVE-2026-117568 · GHSA-cqrv-cwxw-xcq4
mcp-ffmpeg OS Command Injection via videoPath and outputDir
Priority LOW 35
mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info…