CVE-2026-7629

A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1. Impacted is the function runCodeReviewTool of the file src/tools/codeReview.ts of the component Ccode-Review Tool. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.

• CWE-74
• CWE-77

• https://github.com/kleneway/awesome-cursor-mpc-server/
• https://github.com/kleneway/awesome-cursor-mpc-server/issues/6
• https://github.com/kleneway/awesome-cursor-mpc-server/pull/14
• https://github.com/user-attachments/files/26019723/awesome-cursor-mpc-server_bug.pdf
• https://vuldb.com/submit/806470
• https://vuldb.com/vuln/360575
• https://vuldb.com/vuln/360575/cti
• https://github.com/kleneway/awesome-cursor-mpc-server/issues/6

Published

May 2, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76260In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …6.5
• CVE-2026-76261In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …6.5
• CVE-2026-76262In Splunk Enterprise 10.4 versions below 10.4.2, an unauthen…7.5
• CVE-2026-76263In Splunk Enterprise versions below 10.4.2 and 10.2.6, a use…5.4
• CVE-2026-7627A security vulnerability has been detected in 8nite metatrad…6.3
• CVE-2026-7628A vulnerability was detected in crazyrabbitLTC mcp-code-revi…6.3
• CVE-2026-7630A vulnerability has been found in innocommerce InnoShop up t…7.3
• CVE-2026-76309In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …4.3
• CVE-2026-7631A vulnerability was found in code-projects Online Hospital M…5.4
• CVE-2026-76310In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …9.4
• CVE-2026-76311In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, …9.4
• CVE-2026-76312In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, …9.4