HIGH 8.4 GitHub
CVE-2026-55157
Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
### Summary
`token-optimizer-mcp` is vulnerable to OS command injection in the `smart_user` tool.
The `get-user-info` operation accepts a user-controlled `username` argument and later interpolates it into a shell command executed through `execAsync()`:
```ts
getent passwd "${username}" || grep "^${username}:" /etc/passwd
```
Although the value is wrapped in double quotes, POSIX shells still evaluate command substitution such as `$(...)` and backticks inside double quotes. As a result, an MCP
Affected Products
- npm/@ooples/token-optimizer-mcp < 5.1.0
References
- https://github.com/advisories/GHSA-49mq-fc6q-3h46
- https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46
- https://github.com/ooples/token-optimizer-mcp/commit/b4ee96dac799cbfba0a9f9c17844ce9d613cb
- https://github.com/ooples/token-optimizer-mcp/releases/tag/v5.1.0
This high severity vulnerability with a CVSS score of 8.4 was published on 2026-08-14 via GitHub. Affected: npm/@ooples/token-optimizer-mcp < 5.1.0.
vulnfeed aggregates 10939 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.