Vulnerabilities & PatchesEmerging1 src
CVE-2026-78430 - sworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection
CVE ID : CVE-2026-78430
Published : Aug. 24, 2026, 8:17 p. m.
• 54 minutes ago
Description : A vulnerability was detected in sworddut mcp-ffmpeg-helper 0. 1. 0/0. 1. 1/0. 2. 1. This affects the function handleToolCall of the file src/tools/handlers. ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The exploit is now public and may be used.
The project was informed of the problem early through an issue report but has not responded yet.
Severity: 5.3
• MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...