CVE Explorer

CVE-2026-44450

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary names but forwards the args array to the child process without any validation. Every binary on the allowlist accepts an inline-code execution flag (-e for node/bun, -c for python3/deno), giving any logged-in user arbitrary OS-level code execution on the Lumiverse server. The route requires only requireAuth (not requireOwner). The server bin

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:55414a4fac769eb2c80f76c5a8fb6f4013693924f55d58d0c0b2df618ae52426

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"Lumiverse","vendor":"prolix-oc","versions":[{"status":"affected","version":"< 0.9.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:fdb3a71e4179cd15c0c6e97d2a406b3caca5997c312ab166600dcb8bbadfe6cd · sha256:9a36fca8f7589c78… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:fdb3a71e4179cd15c0c6e97d2a406b3caca5997c312ab166600dcb8bbadfe6cd · sha256:9a36fca8f7589c78… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-88","description":"CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:fdb3a71e4179cd15c0c6e97d2a406b3caca5997c312ab166600dcb8bbadfe6cd · sha256:9a36fca8f7589c78… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"name":"https://github.com/prolix-oc/Lumiverse/security/advisories/GHSA-mfwv-ch2f-9j5v","tags":["x_refsource_CONFIRM"],"url":"https://github.com/prolix-oc/Lumiverse/security/advisories/GHSA-mfwv-ch2f-9j5v"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:fdb3a71e4179cd15c0c6e97d2a406b3caca5997c312ab166600dcb8bbadfe6cd · sha256:9a36fca8f7589c78… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer