Live › vulnerability › CVE-2026-119025
The npm package open, versions 7.2.0 up to 11.0.0, passes URLs to PowerShell without escaping them. An attacker who supplies a URL containing $(...) subexpressions, such as an OAuth endpoint from a malicious MCP server, can run PowerShell code on Windows and WSL.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 12:24 UTC. All times on this page are UTC.
Applications that depend on the npm package open between 7.2.0 and 11.0.0 and run on Windows or WSL are exposed, especially when they open URLs that come from outside, such as OAuth endpoints returned by MCP servers. Projects that only open trusted fixed URLs, run on Linux or macOS, or do not ship the affected version can skip it.
No product ranges from the sources yet.
npm ls open in each project and check whether any copy resolves to a version from 7.2.0 up to, but not including, 11.0.0.package-lock.json, pnpm-lock.yaml or yarn.lock for open versions in that range, including transitive dependencies.open.11.0.0 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.
This page as .md · .json · in your agent: get_signal("CVE-2026-119025")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.