CVE-2026-117559 - DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass
CVE ID :CVE-2026-117559 Published : Oct. 27, 2026, 2:16 p.m. | 7 minutes ago Description :DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including...