CVE-2026-117558 - ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status
CVE ID :CVE-2026-117558 Published : Oct. 27, 2026, 2:16 p.m. | 7 minutes ago Description :The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument. The...