{"id":"CVE-2026-119025","title":"open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows","summary":"open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth autho…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-78"],"vendor":"sindresorhus","product":"open","affected":["open >= 7.2.0 < 11.0.0","inspector >= 2.0.0 < 2.12.0","opencode >= 1.0.137 < 1.18.33"],"exploitAvailable":true,"published":"2026-10-29","updated":"2026-10-29","sourceUpdated":"2026-10-29T11:24:18.723Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-119025","references":[{"url":"https://github.com/sindresorhus/open/commit/274d70446bf38a7b7d50b214dd3962ef8ea9320d","label":"Patch Commit"},{"url":"https://github.com/sindresorhus/open/releases/tag/v11.0.0","label":"open v11.0.0 Release Notes"},{"url":"https://github.com/sindresorhus/open/blob/v10.2.0/index.js#L189-L203"},{"url":"https://github.com/sindresorhus/open/blob/v7.2.0/index.js#L60-L99"},{"url":"https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-q978-78c7-phqw","label":"GitHub Security Advisory (GHSA-q978-78c7-phqw)"},{"url":"https://github.com/anomalyco/opencode/pull/51414","label":"opencode Pull Request #51414"},{"url":"https://github.com/anomalyco/opencode/commit/29f07e0c69ad8668e0e15b0eb54f2fcb342af98c","label":"opencode Patch Commit"},{"url":"https://www.vulncheck.com/advisories/open-7.2.0-before-11.0.0-os-command-injection-via-powershell-on-windows","label":"VulnCheck Advisory: open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows"}],"tags":["cve.org","exploit-available"],"epss":0.01446,"epssPercentile":0.73297,"exploits":{"github":1,"githubRepos":["https://github.com/shouvikkkk/oauth-sink-check"],"checkedAt":"2026-11-01T17:58:21.190Z"},"ingestedAt":"2026-11-01T17:57:46.230Z","slug":"CVE-2026-119025","body":"## Overview\n\nopen 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.\n\n## Affected\n\n- `open >= 7.2.0 < 11.0.0`\n- `inspector >= 2.0.0 < 2.12.0`\n- `opencode >= 1.0.137 < 1.18.33`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":41.3,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[]}