OS command injection in Klarso GmbH neo-mjs
Priority HIGH 82CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-78.
Summary
Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS command execution when an AI agent is induced to invoke these tools. Commit 88c77fc fixes these vulnerabilities.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.03431 89th percentileScored 2026-11-07
Fix Fixed neo-mjs (Klarso GmbH): 88c77fc4
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Klarso GmbH | neo-mjs | before 88c77fc4 | 88c77fc4 | Patch available | CNA |
- neo-mjs VendorKlarso GmbH Affected before 88c77fc4 Fixed in 88c77fc4 Patch available CNA
Remediation
- Fix · CNA neo-mjs (Klarso GmbH) Fixed in 88c77fc4
Timeline
- 2026-10-02 Threatist record created from CVE-2026-18482
- 2026-10-03 Alias added: GHSA-cmg9-62q9-xmww
References
Sources
- CVE-2026-18482 · CVE Program
- CVE-2026-18482 · NVD
- FIRST EPSS
- GHSA-cmg9-62q9-xmww · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences