Wong2 vulnerabilities
We track 1 vulnerability in Wong2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2025.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Wong2 vulnerabilities
- 8.1 High severity
mcp-cli: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack i