CVE-2026-26015
Unauthenticated RCE in DocsGPT MCP STDIO Configuration
概要
Unauthenticated RCE in DocsGPT MCP STDIO Configuration
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution (RCE). This issue has been patched in version 0.16.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory ox.security
- web github.com
- web ox.security