{"id":"CVE-2026-117568","title":"mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir","summary":"mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-78"],"vendor":"bitscorp-mcp","product":"mcp-ffmpeg","affected":["mcp-ffmpeg <= 1.0.5"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-28T14:58:09.353499Z"},"published":"2026-10-27","updated":"2026-10-28","sourceUpdated":"2026-10-28T16:16:50.835Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-117568","references":[{"url":"https://github.com/bitscorp-mcp/mcp-ffmpeg/issues/8","label":"GitHub Issue #8"},{"url":"https://github.com/bitscorp-mcp/mcp-ffmpeg"},{"url":"https://github.com/bitscorp-mcp/mcp-ffmpeg/blob/2ec04e44850cc5ee5354c40643be8bc91c218654/src/mcp-ffmpeg.ts#L184"},{"url":"https://www.vulncheck.com/advisories/mcp-ffmpeg-through-1.0.5-os-command-injection-via-videopath-and-outputdir","label":"VulnCheck Advisory: mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir"}],"tags":["cve.org"],"epss":0.00596,"epssPercentile":0.4835,"ingestedAt":"2026-10-27T16:11:59.338Z","slug":"CVE-2026-117568","body":"## Overview\n\nmcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $(), backticks or a closing double quote in an existing file or directory name to break out of the child_process.exec command string and execute commands as the MCP server user.\n\n## Affected\n\n- `mcp-ffmpeg <= 1.0.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}