SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-18482

CRITICAL · CVSS 9.8 EPSS 1.65% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The FileSystemService.mjs component of Neo.mjs is vulnerable to command injection due to unsafe interpolation of user-controlled absolutePath values in the checkSyntax() and runPlaywrightTest() functions, allowing for arbitrary OS command execution. This poses a significant risk to systems utilizing this component, particularly in environments where AI agents can trigger these functions. Organizations using Neo.mjs should prioritize remediation to mitigate potential exploitation of this vulnerability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-18482
Severity
CRITICAL
CVSS
9.8
EPSS
1.65%

Original NVD Description

Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, where the checkSyntax() and runPlaywrightTest() functions unsafely interpolate caller-controlled absolutePath values into shell commands, enabling arbitrary OS command execution when an AI agent is induced to invoke these tools. Commit 88c77fc fixes these vulnerabilities.