CVE-2026-117573Published
hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools
Exact source revision recorded 27 Oct 2026 15:09:21 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-117573 · Microsoft / collected KEV context
cve-program · CVE-2026-117573
- https://github.com/masc-ucsc/hagent/issues/98
- https://github.com/masc-ucsc/hagent
- https://github.com/masc-ucsc/hagent/blob/761eec627a1e6fb128a2a8ce9245aa595cc2f7af/hagent/mcp/mcp_arduino.py#L776
- https://github.com/masc-ucsc/hagent/blob/761eec627a1e6fb128a2a8ce9245aa595cc2f7af/hagent/mcp/mcp_esp32.py#L682
- https://www.vulncheck.com/advisories/hagent-through-commit-761eec6-os-command-injection-via-arduino-and-esp32-mcp-tools
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.