CVE-2026-5621 ChrisChinchilla CVE debrief

Who should care

Users of ChrisChinchilla Vale-MCP up to 0.1.0 should be aware of this vulnerability and take necessary precautions. Affected operator, platform, vulnerability-management, and security-team impact should be reviewed.

Technical summary

The vulnerability is caused by improper handling of the config_path argument in the HTTP Interface of ChrisChinchilla Vale-MCP up to 0.1.0, allowing for OS command injection. The attack vector is local. The vulnerability affects an unknown functionality of the file src/index.ts of the component HTTP Interface. Users of ChrisChinchilla Vale-MCP up to 0.1.0 should be aware of this vulnerability and take necessary precautions, including reviewing compensating controls for exposed systems while remediation is scheduled and verified, and tracking exceptions, retesting remediated assets, and closing the item only after evidence is documented.

Defensive priority

Low priority due to local attack requirement and low CVSS score.

Recommended defensive actions

• Inventory and verify affected versions of ChrisChinchilla Vale-MCP
• Apply vendor patches or updates if available
• Implement compensating controls to restrict access to the HTTP Interface
• Monitor for suspicious activity and exception tracking
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record was published on 2026-04-06T05:16:02.450Z and was last modified on 2026-07-24T09:10:00.153Z. The NVD entry is currently Deferred. The vulnerability was found in ChrisChinchilla Vale-MCP up to 0.1.0 and affects an unknown functionality of the file src/index.ts of the component HTTP Interface. The manipulation of the argument config_path results in os command injection. Attacking locally is a requirement. The exploit has been made public and could be used.

Official resources