This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
STACKFLAG
stackflag.bsky.social
did:plc:zhe53h7ajlloep2oso5pqxzj
CVE-2026-85660 - cli-mcp-server
The version 0.2.5 of cli-mcp-server checks only certain allowed commands, but when a specific setting is turned on it can be tricked into running other commands hidden inside $(…) or…
Too many irrelevant or confusing CVEs? Use stackflag.com
#mladensu #CVE #infosec
https://stackflag.com/vulnerabilities/cve-2026-85660-cli-mcp-server?utm_source=bluesky&utm_medium=social&utm_campaign=cve_poster&utm_content=cve-2026-85660
2026-09-04T17:10:03.468Z