CVE-2026-19268: A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts t
mediumvulnerabilityLLM-Specific
security
Summary
A vulnerability (CVE-2026-19268) was found in MCPGateway, a tool related to Claude usage tracking, where an attacker can inject commands by manipulating the 'since' argument in the Claude Usage Range Endpoint function. This command injection (tricking the system into running unintended commands) can be exploited remotely, and working exploit code is already publicly available.
Vulnerability Details
CVSS Score
6.3(medium)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
network
Attack Complexity
low
Privileges Required
low
User Interaction
none
Disclosure Date
August 8, 2026
Classification
Attack Type
Other
Attack SophisticationModerate
Impact (CIA+S)
integrityconfidentiality
Affected Vendors
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19268
First tracked: August 8, 2026 at 08:07 AM
Classified by LLM (prompt v3) · confidence: 75%