raine vulnerabilities

Products

• consult-llm-mcp 1

Latest raine CVEs

Newest publication first

1. CVE-2026-5125 raine consult-llm-mcp server.ts child_process.execSync os command injection

   Published 2026-03-30

   Medium·CVSS 4.8 EPSS 0.93%

   A vulnerability was detected in raine consult-llm-mcp up to 2.5.3. Affected by this vulnerability is the function child_process.execSync of the file src/server.ts. The manipulation of the argument git_diff.base_ref/git_diff.files results in os command injection. The attack is onl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.