GCVE-110-CARGO-2026-006295

Advisory Published

Vulnetix · Advisory published October 10, 2026

[P-MKFIFO] Named pipe creation (possible reverse shell component) — matched: shell("cd ~/xfer && printf '#!/bin/sh\\n' > tool.sh && chmod 750 tool.sh && ln -s sub/note.txt notelink && mkfifo pipe")

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-522Insufficiently Protected Credentials

Affected Products

Vendor	Product	Versions	Platforms
cargo	computer-use-mcp	0.3.2 (affected)	—

References

advisory

web

Browse GCVE Records

3,144 records in the GCVE database · Updated October 12, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON