Read the docs

radareorg

Records184All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high66CVSS 7.0–8.9

Exploited now

radareorg records in CISA KEV

No radareorg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Radare2 Mcp Server · all components

Priority HIGH 81

radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-control…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0192 Published 2026-04-23 No fix listed CWE-78
Open these records in search →