CVE-2026-59176

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-server` accepts an unconstrained `version` string using only `z.string()` validation in `packages/mcp-server/src/index.ts` and interpolates it into `functype@<version>` for `pnpm add`. Package-alias syntaxes such as `file:`, `npm:`, URLs, or paths can cause an arbitrary local or remote package to be installed as functype. Immediately afterward, `initDocsData(true)` in `packages/mcp-server/src/lib/docs/data.ts` resolves `functype/cli` and dynamically imports the newly installed module, executing attacker-controlled JavaScript with the MCP server process's privileges. Any MCP client able to send a `tools/call` request invoking the tool can exploit the flaw; the tool is enabled by default without authentication in `stdio` mode. A connected AI assistant susceptible to indirect prompt injection can also be induced to invoke it from a malicious document or web page. In non-default `TRANSPORT_TYPE=httpStream` deployments, a network-accessible attacker does not require local access. Successful execution can read process secrets, modify files, or terminate the server. This issue is fixed in `version` 1.4.4.

• CWE-829

• https://github.com/jordanburke/functype/commit/c0d58ad9c2a7d15c6117bd3adbbd75de37317dcf
• https://github.com/jordanburke/functype/releases/tag/v1.4.4
• https://github.com/jordanburke/functype/security/advisories/GHSA-wcjj-9m6g-2fr2
• https://github.com/jordanburke/functype/security/advisories/GHSA-wcjj-9m6g-2fr2

Published

Oct 28, 2026

Last Modified

Nov 3, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59167SunEditor is a lightweight and powerful WYSIWYG editor in va…10
• CVE-2026-59168Dasel is a command-line tool and library for querying, modif…6.2
• CVE-2026-5917libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built w…8.8
• CVE-2026-59171JSON-java is a reference implementation of a JSON package in…5.9
• CVE-2026-59172Joker is a small Clojure interpreter, linter and formatter w…7.8
• CVE-2026-59173Uncontrolled Resource Consumption vulnerability in Apache Tr…7.5
• CVE-2026-59177ESPHome Device Builder Dashboard is a dashboard for the ESPH…8.8
• CVE-2026-59178ESPHome Device Builder Dashboard is a dashboard for the ESPH…9.8
• CVE-2026-59179OpenHop is a tool for creating interactive data-flow diagram…8.3
• CVE-2026-5918Inappropriate implementation in Navigation in Google Chrome …4.3
• CVE-2026-59180Apprise is an open source library which allows you to send a…3.1
• CVE-2026-59181OpenImageIO is a toolset for reading, writing, and manipulat…6.1