TI-2026-06081 CVE-2026-6942 · GHSA-g65f-grqm-9jg5radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter BypassPriority HIGH 81radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-control…CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0192 · Published 2026-04-23 · No fix listed CWE-78