Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-91988

atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

atomic-agents-stack before 1.1.0 accepts cleartext HTTP schemes in the HTTP MCP server-registry backend factory, allowing network man-in-the-middle attackers to rewrite catalog responses. Attackers can inject arbitrary command and argument values that are spawned as local subprocesses by MCPClientPool to achieve code execution on the agent host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dep0we atomic-agents-stack

Default version status: unaffected

  • 0 to < 1.1.0affected
  • 1.1.0unaffected
pkg:pypi/atomic-agents-stack

References