evernote-mcp-server vulnerabilities

1 known vulnerability in evernote-mcp-server from Evernote-mcp-server. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  evernote-mcp-server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-12489Nov 6, 2025Evernote-mcp-serverEPSS 1.33%

  evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-pr