GHSA-q978-78c7-phqw: open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

Published Oct 29, 2026

Updated

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorizationendpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.

Event History

Oct 29, 2026

CVE Published

via OSV·11:24 AM

Data Sourced

via OSV·11:24 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which environments are exposed to this issue?

The vulnerability affects open versions from 7.2.0 before 11.0.0 when used on Windows or Windows Subsystem for Linux (WSL). The described execution path invokes PowerShell.

What must an attacker control to exploit it?

An attacker needs to supply a crafted URL containing a PowerShell subexpression such as $(...). One described delivery path is a malicious MCP server providing an OAuth authorization_endpoint value.

Does exploitation require prior authentication or a separate privilege on the target?

No prior privileges are indicated in the supplied vector (PR:N). However, a user must interact with the crafted URL (UI:P) for the vulnerable code path to be reached.

How can I remediate the issue?

Upgrade open to version 11.0.0 or later. Version 11.0.0 is identified as the release boundary after the affected versions.

GHSA-q978-78c7-phqw: open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

Event History

Frequently Asked Questions

Which environments are exposed to this issue?

What must an attacker control to exploit it?

Does exploitation require prior authentication or a separate privilege on the target?

How can I remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Which environments are exposed to this issue?

What must an attacker control to exploit it?

Does exploitation require prior authentication or a separate privilege on the target?

How can I remediate the issue?