LiuMengxuan04 CVE debriefs

CVE-2026-16133

A vulnerability has been identified in LiuMengxuan04 MiniCode 0.1.0. The issue arises from a flaw in the child_process.spawn function within the mcp.ts file, which can be exploited to execute command injection attacks. The vulnerability is considered to have a high level of complexity and is difficult to exploit. Remote attackers can launch an attack, but a successful exploit requires specific conditions [truncated]