droidmind vulnerabilities

CVEs whose affected-version data names the droidmind package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117559High· 7.8

1w ago

DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands t…

▾ Twilighthyperb1iss · droidmindvia CVEORG