{"data":{"id":"644218bc-b5e4-4458-b7b9-5ad0bdc46c6d","title":"CVE-2026-117560: ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows…","summary":"ATXP Gemini CLI extension through 1.0.0 has an OS command injection flaw in runAtxp(), which fails to sanitize MCP tool parameters. An attacker can plant instructions in email or SMS content that inject $() or backtick substitutions into parameters such as message_id, subject, or query, running commands as the user.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-117560","publishedAt":"2026-10-27T14:16:38.133Z","cveId":"CVE-2026-117560","cweIds":["CWE-78"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google"],"affectedVendorsRaw":["ATXP Gemini CLI extension","Gemini CLI","MCP tools"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ATXP Gemini CLI extension OS command injection in runAtxp() via MCP parameters","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-27T18:10:55.508Z","kevDateAdded":null,"advisoryAliases":["GHSA-w542-83fj-2ghf"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-27T18:11:00.489Z","patchAvailable":null,"disclosureDate":"2026-10-27T14:16:38.133Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"]}}