{"id":"CVE-2026-120275","kind":"vulnerability","aliases":["CVE-2026-120275"],"related":[],"title":"MiniMax Code: find command handler lets remote attackers inject OS commands","description":"A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"MiniMax Code 0.5.8 has a flaw in its Find Command Handler where the -exec argument is not sanitized, allowing operating system command injection. A remote attacker can run commands on the affected machine.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"MiniMax Code","fixed":[],"affected":"0.5.8","ecosystem":"npm"}],"ecosystems":[],"tags":["ai-tooling","coding-agent","minimax-code"],"not_affected_if":["other-version"],"how_to_check":"Run mcode --version (or npm ls -g minimax-code) and look for 0.5.8, the only version the CVE names. Whether 0.5.9, 0.5.10, 0.6.2 or later are affected is unknown; no source says. Until a fix is confirmed, review which commands your MiniMax Code agent may auto-run, especially find with -exec, and require approval for them.","fix":null,"status":"open","published_at":"2026-11-01T23:17:28+00:00","first_seen_at":"2026-11-01T23:22:39+00:00","triaged_at":"2026-11-01T23:23:30+00:00","updated_at":"2026-11-01T23:25:07+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-11-01T23:23:30Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"MiniMax Code: find command handler lets remote attackers inject OS commands","impact":"high","summary":"MiniMax Code 0.5.8 has a flaw in its Find Command Handler where the -exec argument is not sanitized, allowing operating system command injection. A remote attacker can run commands on the affected machine.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["minimax-code","coding-agent"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker runs operating system commands on the host machine remotely.","analyst_note":"Confirm the vulnerable code path, required exposure, and whether any fixed version or vendor response exists at https://nvd.nist.gov/vuln/detail/CVE-2026-120275.","how_to_check":"- Check whether MiniMax Code version `0.5.8` is installed on the machine or in your developer tooling.\n- unknown for other checks; the sources do not describe configuration or file paths.","plain_action":"","needs_analyst":true,"not_affected_if":["other-version"],"who_is_affected":"The sources describe the flaw as a remote OS command injection in the Find Command Handler of MiniMax Code 0.5.8, but do not say which deployments or configurations are exposed. The vendor did not respond to early disclosure, so no fix is known. Teams not running this version can likely skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000686,"input_tokens":4150,"output_tokens":542,"severity_before":"medium"},"analyst_status":"done","analyst_note":"Confirm the vulnerable code path, required exposure, and whether any fixed version or vendor response exists at https://nvd.nist.gov/vuln/detail/CVE-2026-120275.","search":"'-120275':14A,17A '-2026':13A,16A '0.5.8':31B,77C 'affect':60B,79C 'agent':25B 'ai':21B 'ai-tool':20B 'allow':47B 'argument':43B,93C 'attack':8A,54B,101C 'code':2A,19A,24B,28B,30B,76C 'coding-ag':23B 'command':4A,11A,38B,50B,57B,87C,98C 'compon':85C 'contact':110C 'cve':12A,15A 'disclosur':114C 'discov':67C 'earli':111C 'exec':42B,94C 'find':3A,37B,86C 'flaw':34B,64C 'handler':5A,39B,88C 'inject':9A,51B,99C 'ji':72C 'let':6A 'machin':61B 'manipul':90C 'may':102C 'minimax':1A,18A,27B,29B,75C 'minimax-cod':26B 'oper':48B 'os':10A,97C 'part':82C 'perform':104C 'remot':7A,53B,106C 'respond':118C 'result':95C 'run':56B 'sanit':46B 'secur':63C 'shanghai':69C 'system':49B 'technolog':74C 'tool':22B 'unknown':81C 'vendor':108C 'way':121C 'xi':70C 'yu':71C 'zhi':73C","nicknames":[],"mitigations":[],"who_affected":"Anyone running MiniMax Code (Shanghai Xi Yu Ji Zhi Technology) version 0.5.8, a coding agent CLI. The CVE says the -exec argument of the find command handler is not neutralized, so OS commands can be injected; the CVE says it can be attacked remotely, but no source says how input reaches the handler (likely agent or prompt-driven command approval). The vendor did not respond to disclosure and no fix is known. Teams not using 0.5.8 can likely skip it, though other versions are untested by any source.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"first_public_at":"2026-11-01T23:17:28+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120275","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120275","severity":null,"published_at":"2026-11-01T23:17:28+00:00","modified_at":"2026-11-01T23:17:28+00:00","first_seen_at":"2026-11-01T23:22:39+00:00","fetched_at":"2026-11-01T23:22:39+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-120275:1326","url":null,"severity":null,"published_at":"2026-11-01T23:25:07+00:00","modified_at":"2026-11-01T23:25:07+00:00","first_seen_at":"2026-11-01T23:25:07+00:00","fetched_at":"2026-11-01T23:25:07+00:00","note":"Only NVD/VulDB CNA text found (NVD page empty to fetch); no vendor advisory, no fix, no PoC, no exploitation seen. Vendor reportedly did not respond. Newer releases 0.5.9/0.5.10/0.6.2 exist (freedom.tech) but no source says they fix this. Nothing verified."}],"documents":[{"id":41266,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120275","title":"NVD CVE-2026-120275","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}