CVE-2026-5603 elgentos magento2-dev-mcp index.ts executeMagerun2Command os command injection
Local attackers can execute arbitrary OS commands via the executeMagerun2Command function in the elgentos magento2-dev-mcp tool.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-5603?
CVE-2026-5603 is a medium-severity command injection vulnerability in elgentos magento2-dev-mcp, published on 5 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability was identified in elgentos magento2-dev-mcp up to 1.0.2. The affected element is the function executeMagerun2Command of the file src/index.ts. Such manipulation leads to os command injection. An attack has to be approached locally. The exploit is publicly available and might be used. The name of the patch is aa1ffcc0aea1b212c69787391783af27df15ae9d. A patch should be applied to remediate this issue.
Which versions are affected by CVE-2026-5603?
2 open source packages ship an affected version, including @elgentos/magento2-dev-mcp.
| Package | Affected | Fixed in |
|---|---|---|
@elgentos/magento2-dev-mcp npm | All versions to 1.0.2 | None |
@elgentos/magento2-dev-mcp npm | All versions to 1.0.2 | None |
How do I fix CVE-2026-5603?
No fix has been published for CVE-2026-5603 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-5603 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-5603 exists.
Sources
Also known as GHSA-xqv9-qr76-hfq2.