LOW
sworddut
CVE published 2026-08-24
CVE-2026-78430
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCalls of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The vulnerability allows local attackers to inject os commands, potentially leading to system compromise. Defender [truncated]