mcp-ffmpeg vulnerabilities

CVEs whose affected-version data names the mcp-ffmpeg package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117568High· 7.0

6d ago

mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir

mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers…

▾ Twilightbitscorp-mcp · mcp-ffmpegEPSS 0.60%via CVEORG