Approved changes feed: RSS · Atom

cpe:2.3:a:eyal-gor:p_69_branch_monkey_mcp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEyal Gor (e5c31990-8db7-585c-a84b-4e99689b9f7e)
ProductP 69 Branch Monkey Mcp (fcd4356d-28af-5f7d-987d-6b93c1b9f537)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7590 vulnerable 2026-06-08 08:08:57.441167 eyal-gor p_69_branch_monkey_mcp Preview Endpoint advanced.py os command injection
HIGH (7.3)
A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435855f18af3373. The affected element is an unknown function of the file branch_monkey_mcp/bridge_and_local_actions/routes/advanced.py of the component Preview Endpoint. Such manipulation of the argument dev_script leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-01T18:45:13.771Z
Updated: 2026-05-01T21:31:33.190Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.