CVE-2026-91988

HIGHCVSS 8.1

Description

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spawned as local subprocesses by MCPClientPool to achieve code execution on the agent host.

Timeline

Published:September 15th, 2026 4:17 PM

Last modified:September 24th, 2026 8:43 PM

CVSS Scoring

CVSS v3: 8.1 (HIGH)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-319

References & Reports

Advisories, patches, and third-party reports

https://github.com/dep0we/atomic-agents-stack/security/advisories/GHSA-xhcr-cqfr-m3hv
https://www.vulncheck.com/advisories/atomic-agents-stack-before-1.1.0-remote-code-execution-via-http-mcp

Source: NIST NVD · Data may lag official sources by up to one minute