CVE-2026-55157 - Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
CVE ID :CVE-2026-55157 Published : Sept. 28, 2026, 6:17 p.m. | 1 hour, 58 minutes ago Description :Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is...