CVE-2026-19334: A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown pa
mediumvulnerabilityLLM-Specific
security
Summary
A vulnerability (CVE-2026-19334) was found in NightTrek Ollama-mcp that allows command injection (running unauthorized system commands) through manipulated arguments in the src/index.ts file, but only if an attacker has local access to the system. Since the software uses a rolling release model (continuous updates without fixed version numbers), specific affected versions cannot be identified, and the developers have not yet responded to the security report.
Vulnerability Details
CVSS Score
5.3(medium)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
local
Attack Complexity
low
Privileges Required
low
User Interaction
none
Disclosure Date
August 9, 2026
Classification
Attack Type
Other
Attack SophisticationTrivial
Impact (CIA+S)
integrityconfidentiality
Affected Vendors
OpenAI
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19334
First tracked: August 9, 2026 at 02:08 AM
Classified by LLM (prompt v3) · confidence: 80%