CVE-2026-19334
Received Received - Intake

Command Injection in NightTrek Ollama-mcp

Publication date: 2026-08-09

Last updated on: 2026-08-09

Assigner: VulDB

Description
A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argument name/modelfile/source/destination causes command injection. The attack can only be executed locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-09
Last Modified
2026-08-09
Generated
2026-08-09
AI Q&A
2026-08-09
EPSS Evaluated
N/A
NVD
CVE-2026-19334
EUVD
EUVD-2026-54871

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
nighttrek ollama-mcp to 0.1.0 (inc)
nighttrek ollama-mcp to 80cf2e17cfc144963a475b619093a2d13c13dbc9 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a local command injection flaw in NightTrek Ollama-mcp up to commit 80cf2e17cfc144963a475b619093a2d13c13dbc9. It affects the file src/index.ts where untrusted MCP client arguments like name, modelfile, source, and destination are directly interpolated into shell commands and executed via child_process.exec(). Attackers can inject shell metacharacters to execute arbitrary OS commands with the privileges of the MCP server process.

Detection Guidance

Check if NightTrek Ollama-mcp is installed and inspect the src/index.ts file for vulnerable handlers like handleCreate, handleShow, handlePull, handlePush, handleCopy, and handleRemove that use child_process.exec() or execAsync() with untrusted arguments.

Impact Analysis

If you run a vulnerable version of Ollama-mcp locally, an attacker with local access could execute arbitrary commands on your system. This could lead to data theft, system compromise, or unauthorized actions depending on the MCP server's privileges. The attack requires local access but could be exploited by untrusted users on the same machine.

Compliance Impact

This vulnerability could lead to unauthorized local command execution, potentially violating GDPR's integrity principle or HIPAA's access controls if sensitive data is exposed or modified. Compliance may be impacted if the MCP server handles regulated data, as the flaw enables local privilege escalation and data tampering.

Mitigation Strategies

Replace child_process.exec() or execAsync() with safer alternatives like execFile() or spawn() using argument arrays. Avoid interpolating untrusted input directly into shell commands.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19334. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart