---
id: "CVE-2026-120275"
kind: "vulnerability"
aliases: ["CVE-2026-120275"]
title: "MiniMax Code: find command handler lets remote attackers inject OS commands"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "MiniMax Code", "fixed": [], "affected": "0.5.8", "ecosystem": "npm"}]
ecosystems: []
tags: ["ai-tooling", "coding-agent", "minimax-code"]
not_affected_if: ["other-version"]
published_at: "2026-11-01T23:17:28+00:00"
first_seen_at: "2026-11-01T23:22:39+00:00"
updated_at: "2026-11-01T23:25:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120275", "first_seen_at": "2026-11-01T23:22:39+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-01T23:25:07+00:00"}]
---

# MiniMax Code: find command handler lets remote attackers inject OS commands

MiniMax Code 0.5.8 has a flaw in its Find Command Handler where the -exec argument is not sanitized, allowing operating system command injection. A remote attacker can run commands on the affected machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:MiniMax Code affected 0.5.8 fixed ?

## How to check

Run mcode --version (or npm ls -g minimax-code) and look for 0.5.8, the only version the CVE names. Whether 0.5.9, 0.5.10, 0.6.2 or later are affected is unknown; no source says. Until a fix is confirmed, review which commands your MiniMax Code agent may auto-run, especially find with -exec, and require approval for them.

## Timeline

- 2026-11-01T23:22:39+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120275
- 2026-11-01T23:25:07+00:00 analyst — Only NVD/VulDB CNA text found (NVD page empty to fetch); no vendor advisory, no fix, no PoC, no exploitation seen. Vendor reportedly did not respond. Newer releases 0.5.9/0.5.10/0.6.2 exist (freedom.tech) but no source says they fix this. Nothing verified.

## Documents

- [describes] NVD CVE-2026-120275 https://nvd.nist.gov/vuln/detail/CVE-2026-120275

## From the sources

A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an unknown part of the component Find Command Handler. The manipulation of the argument -exec results in os command injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_