{"id":"CVE-2026-55157","revision":"fc16751307924a0188d234d8a00514d2","records":[{"revision":"fc16751307924a0188d234d8a00514d2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-55157","aliases":[],"title":"Token Optimizer MCP: OS command injection in smart_user via username in get-user-info","description":"Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smart_user tool. Any MCP client that can call the smart_user tool can execute arbitrary shell commands through the username argument of the get-user-info operation. The commands execute with the privileges of the user running the token-optimizer-mcp server. This issue has been patched in version 5.1.0.","state":0,"publishedAt":"2026-09-28T17:48:16.422+00:00","modifiedAt":"2026-10-01T14:47:57.868+00:00","affected":[{"ecosystem":"Vendor product","name":"token-optimizer-mcp","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"ooples\",\n                    \"product\": \"token-optimizer-mcp\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 5.1.0\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4,"severity":"HIGH"}],"references":["https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46","https://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7","https://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-55157","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-55157","identifiers":["CVE-2026-55157"]},"retained":false,"historicalAffected":[]}],"coverage":[]}