CVE-2026-78430
Received Received - Intake

Command Injection in sworddut mcp-ffmpeg-helper

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: VulDB

Description
A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-25
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2026-78430
EUVD
EUVD-2026-65092

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
sworddut mcp-ffmpeg-helper From 0.1.0 (inc) to 0.2.1 (inc)
sworddut mcp-ffmpeg-helper 0.1.0
sworddut mcp-ffmpeg-helper 0.1.1
sworddut mcp-ffmpeg-helper 0.2.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an OS command injection flaw in the mcp-ffmpeg-helper tool versions 0.1.0, 0.1.1, and 0.2.1. It occurs in the handleToolCall function of src/tools/handlers.ts where user-controlled arguments like format or codec are directly inserted into a shell command without sanitization. When executed with shell: true, attackers can inject malicious shell commands through these parameters.

Detection Guidance

Check if mcp-ffmpeg-helper versions 0.1.0, 0.1.1, or 0.2.1 are installed by running: npm list mcp-ffmpeg-helper or checking package.json. Inspect src/tools/handlers.ts for unquoted parameter interpolation in shell commands. Monitor for unexpected child_process.spawn calls with shell: true in the codebase.

Impact Analysis

An attacker with local access could exploit this to run arbitrary commands on your system with the same privileges as the MCP server process. This could allow file creation, data exfiltration, or system compromise. The exploit is public, increasing risk of real-world attacks.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially violating data protection requirements under GDPR (Article 32 security of processing) and HIPAA (Security Rule integrity requirements). Unauthorized command execution may result in data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Upgrade to a patched version if available. Remove shell: true from child_process.spawn calls and pass arguments as an array. Validate parameters like format, codec, and options against a strict allowlist. Restrict MCP server permissions to minimize impact of potential exploits.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78430. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart