droidmind vulnerabilities

1 known vulnerability in droidmind from Hyperb1iss. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  droidmind: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-117559Oct 27, 2026Hyperb1iss

  DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters inter