PatchSiren

GongRzhe CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL GongRzhe CVE published 2026-01-07

CVE-2025-61492

A critical command injection vulnerability exists in terminal-controller-mcp version 0.1.7. This vulnerability allows attackers to execute arbitrary commands via crafted input to the execute_command function. The vulnerability has a CVSS score of 10 and is considered critical. Defenders should assess exposure and prioritize remediation to prevent potential command execution attacks. The vulnerability is c [truncated]