hypermodel-labs vulnerabilities

Products

• mcp-server-auto-commit 1

Latest hypermodel-labs CVEs

Newest publication first

1. CVE-2026-4198 hypermodel-labs mcp-server-auto-commit index.ts getGitChanges command injection

   Published 2026-03-15

   Medium·CVSS 4.8

   A vulnerability was determined in hypermodel-labs mcp-server-auto-commit 1.0.0. Affected by this vulnerability is the function getGitChanges of the file index.ts. This manipulation causes command injection. The attack can only be executed locally. The exploit has been publicly di...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.