GongRzhe

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

GongRzhe records in CISA KEV

No GongRzhe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Terminal-controller-mcp 1 record HIGH

Records

3 records

TI-2025-38007 CVE-2025-61492 · GHSA-h4rf-624j-gj33

A command injection vulnerability in the execute_command function of…

HIGH 82

A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02138 Published 2026-01-07 No fix listed CWE-77

TI-2026-46829 CVE-2026-65695 · GHSA-jp99-gp4p-v5cc

Office-Word-MCP-Server 1.1.11 Path Traversal via document tools

HIGH 66

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .doc…

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00483 Published 2026-07-23 No fix listed CWE-22

TI-2025-43538 CVE-2025-71427 · GHSA-xpvr-6r3p-gm34

Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image

LOW 35

Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00289 Published 2026-10-01 No fix listed CWE-22

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0