CVE-2026-19045
Published: Thu, 06 Aug 2026 15:16
Summary
A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_cre
Details
A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. The affected element is the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts of the component get_credential_from_user. This manipulation of the argument Description causes command injection. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.
Are YOU affected by CVE-2026-19045?
5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether CVE-2026-19045 (and any other live CVE) applies. Anonymous, no signup.
curl https://mindsparkstack.com/scan.sh | bash
References
- https://github.com/NocteDefensor/LudusMCP/
- https://github.com/NocteDefensor/LudusMCP/issues/2
- https://github.com/gongyanyugyy/public_exp/issues/1
- https://vuldb.com/cve/CVE-2026-19045
- https://vuldb.com/submit/863833
- https://vuldb.com/vuln/386492
- https://vuldb.com/vuln/386492/cti
- https://github.com/NocteDefensor/LudusMCP/issues/2
- https://github.com/gongyanyugyy/public_exp/issues/1
StackPatch runs this match against YOUR installed packages every hour
Free (3 servers) / from $9/mo (14-day free trial) / Solo $9/mo / Pro $29/mo / Team $79/mo. Indie pricing.