TI-2026-81175 CVE-2026-117573 · GHSA-j5hx-w574-wh9m
OS command injection in hagent Arduino and ESP32 MCP tools
Priority HIGH 72
hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 to…