{"id":"EUVD-2026-88397","enisaUuid":"16357f24-fd06-3a4b-b9ef-82c9c876e3b9","description":"Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smart_user tool. Any MCP client that can call the smart_user tool can execute arbitrary shell commands through the username argument of the get-user-info operation. The commands execute with the privileges of the user running the token-optimizer-mcp server. This issue has been patched in version 5.1.0.","datePublished":"Sep 28, 2026, 5:48:16 PM","dateUpdated":"Oct 1, 2026, 2:47:57 PM","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46\nhttps://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7\nhttps://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0\n","aliases":"CVE-2026-55157\nGHSA-49mq-fc6q-3h46\n","assigner":"GitHub_M","epss":0.88,"enisaIdProduct":[{"id":"9169b63d-fa35-372b-b2d2-816c7ce00f61","product":{"name":"token-optimizer-mcp","vendor":{"name":"ooples"}},"product_version":"\u003c 5.1.0"}],"enisaIdVendor":[{"id":"ba448a06-6f5d-3e3c-8046-e1890173ac80","vendor":{"name":"ooples"}}],"enisaIdVulnerability":[{"id":"19caeca7-0f02-3b25-b101-5f4e73d3b113","vulnerability":{"id":"GHSA-49mq-fc6q-3h46","description":"Token Optimizer MCP: OS command injection in smart_user via username in get-user-info","datePublished":"Aug 14, 2026, 9:42:06 PM","dateUpdated":"Aug 14, 2026, 9:42:06 PM","baseScore":0.0,"references":"https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46\nhttps://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7\nhttps://github.com/ooples/token-optimizer-mcp\nhttps://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0\n","enisa_id":"EUVD-2026-88397\n","aliases":"GHSA-49mq-fc6q-3h46\nCVE-2026-55157\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:59:06 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"34f646f3-17b4-3ed0-8712-45a4329234c6","vulnerability":{"id":"CVE-2026-55157","description":"Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, token-optimizer-mcp is vulnerable to OS command injection in the smart_user tool. Any MCP client that can call the smart_user tool can execute arbitrary shell commands through the username argument of the get-user-info operation. The commands execute with the privileges of the user running the token-optimizer-mcp server. This issue has been patched in version 5.1.0.","datePublished":"Sep 28, 2026, 5:48:16 PM","dateUpdated":"Oct 1, 2026, 2:47:57 PM","status":"PUBLISHED","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46\nhttps://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cbcc7\nhttps://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0\n","enisa_id":"EUVD-2026-88397\n","assigner":"GitHub_M","epss":0.88,"dataProcessed":"Oct 30, 2026, 7:16:28 AM","vulnerabilityProduct":[{"id":"064e610a-c61e-3c53-afdd-45e5ea1d8279","product":{"name":"token-optimizer-mcp","vendor":{"name":"ooples"}},"product_version":"\u003c 5.1.0"}],"vulnerabilityVendor":[{"id":"6c595ba8-c5a4-313a-b529-1b52f90f245c","vendor":{"name":"ooples"}}]}}],"enisaIdAdvisory":[]}