CVE-2026-7653 Details
Description
A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_in_browser of the file src/index.ts of the component MCP Interface. Performing a manipulation of the argument imageUrl results in os command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
A command injection vulnerability has been identified in r-huijts mcp-server-rijksmuseum versions prior to 1.0.4. The issue arises in the 'open_image_in_browser' function within 'src/index.ts', where user-supplied 'imageUrl' arguments are inadequately validated before being passed to a shell command execution function. This flaw allows remote attackers to inject shell metacharacters, executing arbitrary operating system commands with the privileges of the server process. The vulnerability could lead to a complete compromise of the host, including unauthorized data access, modification, and disruption of services.
Users are advised to update to the latest version of 'mcp-server-rijksmuseum' once a patch is available. Until then, do not expose the MCP server to untrusted clients, restrict access to the 'open_image_in_browser' tool to trusted local users, disable browser-opening functionality in untrusted deployments, and run the MCP server with a dedicated low-privilege OS account.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 2, 2026CISA-ADP
Assessed May 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/r-huijts/rijksmuseum-mcp/issues/9 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://vuldb.com/submit/806909 | [email protected] | Permission Required |
| https://vuldb.com/vuln/360778 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/360778/cti | [email protected] | AdvisoryPermission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| r-huijts mcp-server-rijksmuseum | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 2, 2026 | New CVE Received | [email protected] |