Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-58195 · Microsoft / collected KEV context

GHSA-vcv2-r9jh-99m5

cve-program · CVE-2026-58195

• https://github.com/ruvnet/agentic-flow/security/advisories/GHSA-vcv2-r9jh-99m5
• https://github.com/ruvnet/agentic-flow/issues/169
• https://github.com/ruvnet/ruflo/issues/2414
• https://github.com/ruvnet/agentic-flow/pull/170
• https://github.com/ruvnet/ruflo/pull/2415
• https://github.com/ruvnet/agentic-flow/commit/0c2ec967736a8b6b85832c6bae2a3e74989705ec
• https://github.com/ruvnet/ruflo/releases/tag/v3.12.4

nvd · CVE-2026-58195

• https://github.com/ruvnet/agentic-flow/commit/0c2ec967736a8b6b85832c6bae2a3e74989705ec
• https://github.com/ruvnet/agentic-flow/issues/169
• https://github.com/ruvnet/agentic-flow/pull/170
• https://github.com/ruvnet/agentic-flow/security/advisories/GHSA-vcv2-r9jh-99m5
• https://github.com/ruvnet/ruflo/issues/2414
• https://github.com/ruvnet/ruflo/pull/2415
• https://github.com/ruvnet/ruflo/releases/tag/v3.12.4

osv · GHSA-vcv2-r9jh-99m5

• https://github.com/ruvnet/agentic-flow/security/advisories/GHSA-vcv2-r9jh-99m5
• https://github.com/ruvnet/agentic-flow/issues/169
• https://github.com/ruvnet/ruflo/issues/2414
• https://github.com/ruvnet/agentic-flow/pull/170
• https://github.com/ruvnet/ruflo/pull/2415
• https://github.com/ruvnet/agentic-flow
• https://github.com/ruvnet/ruflo/releases/tag/v3.12.4
• https://www.npmjs.com/package/agentic-flow/v/2.0.14

No related operational record is retained in the current change model.