UBUNTU-CVE-2026-119025: Command Injection
open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorizationendpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.
Affected Software
Event History
Frequently Asked Questions
Which environments are affected?
The vulnerable code path affects Windows and Windows Subsystem for Linux (WSL), where crafted URLs can result in PowerShell code execution. The affected version range is 7.2.0 before 11.0.0.
What must an attacker provide to trigger exploitation?
An attacker needs to cause a crafted URL to be supplied to the application, with a $(...) PowerShell subexpression embedded in the URL. One described delivery path is a malicious MCP server providing a crafted OAuth authorization_endpoint value; exploitation also requires user interaction.
What should teams do if they are using an affected version?
Upgrade to version 11.0.0 or later. Prioritize systems running on Windows or WSL and avoid using untrusted MCP servers or OAuth endpoint URLs until the update is applied.