CVE-2026-119025— open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

Quick assessment

Affected

sindresorhus open

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Windows 和 WSL 环境下，版本早于 11.0.0 的 open 7.2.0 存在操作系统命令注入漏洞。攻击者可通过构造恶意 URL（例如来自恶意 MCP 服务器的 OAuth authorization_endpoint 值），在 URL 中嵌入 $(...) 子表达式；当 index.js 将这些子表达式未加转义地传递给时，即可执行 PowerShell 代码。

CVSS 7.5 · High Updated Oct 29, 2026

Possible ATT&CK Techniques 2 AI

T1059.001 · PowerShell T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

Source: CVE Program / CVE List V5

Vulnerability Description

open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as OAuth authorization_endpoint values from malicious MCP servers, which execute when index.js passes them unescaped to powershell -EncodedCommand.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE
sindresorhus	open	7.2.0 ~ 11.0.0	-
modelcontextprotocol	inspector	2.0.0 ~ 2.12.0	-
anomalyco	opencode	1.0.137 ~ 1.18.33	-

II. Public POCs for CVE-2026-119025

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119025

请登录查看更多情报信息。

Other References for CVE-2026-119025 (8)

https://github.com/sindresorhus/open/blob/v10.2.0/index.js#L189-L203 technical-description
https://github.com/sindresorhus/open/blob/v7.2.0/index.js#L60-L99 technical-description
https://github.com/sindresorhus/open/commit/274d70446bf38a7b7d50b214dd3962ef8ea9320d patch
https://github.com/anomalyco/opencode/commit/29f07e0c69ad8668e0e15b0eb54f2fcb342af98c patch
https://github.com/sindresorhus/open/releases/tag/v11.0.0 release-notes
https://github.com/anomalyco/opencode/pull/51414 patch issue-tracking
https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-q978-78c7-phqw vendor-advisory
https://www.vulncheck.com/advisories/open-7.2.0-before-11.0.0-os-command-injection-via-powershell-on-windows third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-119025

IV. Related Vulnerabilities

Same vendor: sindresorhus

Same weakness: CWE-78