CVE-2026-117573 - hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools
CVE ID :CVE-2026-117573 Published : Oct. 27, 2026, 2:16 p.m. | 7 minutes ago Description :hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino...