What happened
NVD published CVE-2026-93965 on 2026-09-20 (CVSS 6.6): command injection in SxDevOps' MCP server-management services. A fix is available as patch 2b4bf8585c3e731e7a8af30801ea46680bc783f9.
Why it matters
A command-injection flaw in an MCP tool that manages server processes: in an agentic deployment, a prompt-injected agent invoking this tool (or a malicious MCP client) can escalate to OS-level command execution on the DevOps server.
Attack vector
The MCP 'MCP STDIO Server Management' component passes the endpoint_or_command argument to subprocess.Popen without neutralization (CWE-77/74), allowing a caller to inject operating-system commands. The vendor responded and released a patch.
Affected systems
aiyiyi121 SxDevOps 1.0/1.1 (backend/aiops/services.py, MCP STDIO Server Management)
Mitigation
Deploy patch 2b4bf8585c3e731e7a8af30801ea46680bc783f9. https://vuldb.com/cve/CVE-2026-93965