andreahaku vulnerabilities

Products

• codex mcp 1
• llm memory mcp 1

Latest andreahaku CVEs

Newest publication first

1. CVE-2026-19329 andreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection

   Published 2026-08-09

   Medium·CVSS 4.8 EPSS 0.78%

   A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390. The affected element is an unknown function of the file src/codex-process-simple.ts of the component ask MCP Tool. The manipulation of the argument model results in command injection...

2. CVE-2026-19282 andreahaku llm_memory_mcp GitHooksManager.ts auto.capture command injection

   Published 2026-08-08

   Medium·CVSS 4.8 EPSS 1.1%

   A weakness has been identified in andreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture of the file src/autolearn/GitHooksManager.ts of the component llm_memory_mcp. Executing a manipulation of the argument hash can lead...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.