CVE-2026-4198

A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0. Affected by this vulnerability is the function getGitChanges of the file index.ts. This manipulation causes command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: f7d992c830c5f2ec5749852e66c0195e3ed7fe30. Applying a patch is the recommended action to fix this issue. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-74
• CWE-77

• https://github.com/hypermodel-labs/mcp-server-auto-commit/
• https://github.com/hypermodel-labs/mcp-server-auto-commit/issues/7
• https://github.com/hypermodel-labs/mcp-server-auto-commit/pull/8/changes/f7d992c830c5f2ec5749852e66c0195e3ed7fe30
• https://github.com/user-attachments/files/25687034/mcp-server-auto-commit_security_advisory.pdf
• https://vuldb.com/?ctiid.351110
• https://vuldb.com/?id.351110
• https://vuldb.com/?submit.770421

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41974Permission control vulnerability in service notifications. I…3.6
• CVE-2026-41975Permission management vulnerability in the network managemen…6.3
• CVE-2026-41976Permission control vulnerability in the audio framework. Imp…6.6
• CVE-2026-41977DoS vulnerability in the log service. Impact: Successful exp…5
• CVE-2026-41978Permission control vulnerability in the clone module. Impact…4.4
• CVE-2026-41979Permission control vulnerability in the print module. Impact…5.5
• CVE-2026-41980Permission control vulnerability in the file preview module.…5.5
• CVE-2026-41981Out-of-bounds write vulnerability in the IPC module. Impact:…5.3
• CVE-2026-41982Race condition vulnerability in the IPC module. Impact: Succ…6.4
• CVE-2026-41983DoS vulnerability in the browser kernel. Impact: Successful …4.3
• CVE-2026-41984UAF vulnerability in the package management module. Impact: …5.2
• CVE-2026-41985UAF vulnerability in the package management module. Impact: …5.1