CVE-2026-117560 - ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools
CVE ID :CVE-2026-117560 Published : Oct. 27, 2026, 2:16 p.m. | 7 minutes ago Description :ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can...