Live › vulnerability › CVE-2026-117568
Go to dashboardmcp-ffmpeg through 1.0.5 passes videoPath and outputDir values into a shell command string via child_process.exec in the resize-video, extract-audio and get-video-info tools. An attacker who controls a file or directory name can embed $(), backticks or a double quote to run commands as the MCP server user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run the mcp-ffmpeg MCP server, especially where an AI agent or user supplies video paths or output directories that could contain attacker-chosen file or directory names. Systems that do not use mcp-ffmpeg, or that only process trusted, fixed paths, are less exposed.
No product ranges from the sources yet.
npm ls mcp-ffmpeg, and see whether it is 1.0.5 or earlier.1.0.5; the sources do not name the fixed release, so check the package registry.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers can embed $(), backticks or a closing double quote in an existing file or directory name to break out of the child_process.exec command string and execute commands as the MCP server user.
This page as .md · .json · in your agent: get_signal("CVE-2026-117568")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.