HIGHCVE-2026-6130CVSS 7.3

CVE-2026-6130: Command Injection in chatboxai chatbox

Platform

nodejs

Component

chatboxai/chatbox

Fixed in

1.0.1

1.1.1

1.2.1

1.3.1

1.4.1

1.5.1

1.6.1

1.7.1

1.8.1

1.9.1

1.10.1

1.11.1

1.12.1

1.13.1

1.14.1

1.15.1

1.16.1

1.17.1

1.18.1

1.19.1

1.20.1

AI Confidence: highNVDEPSS 1.8%Reviewed: May 2026

View on NVD

Save

CVE-2026-6130 is a Command Injection vulnerability affecting chatboxai chatbox versions 1.0.0 through 1.20.0. This flaw allows attackers to execute arbitrary operating system commands on the server, potentially leading to complete system compromise. The vulnerability resides in the StdioClientTransport function within the Model Context Protocol Server Management System component. A public exploit is available, increasing the risk of immediate exploitation.

Impact and Attack Scenarios

Successful exploitation of CVE-2026-6130 allows an attacker to execute arbitrary commands on the server hosting the chatboxai chatbox application. This could lead to data exfiltration, system takeover, and potentially lateral movement within the network if the server has access to other resources. The remote nature of the vulnerability means an attacker does not need local access to exploit it. Given the availability of a public exploit, the blast radius is significant, particularly for organizations running unpatched instances of chatboxai chatbox. The impact is amplified if the chatboxai chatbox instance is exposed to the public internet or is part of a larger, interconnected system.

Exploitation Context

CVE-2026-6130 has a public exploit available, indicating a high probability of exploitation. The vulnerability was reported to the project but has not yet received a response, suggesting a potential lack of active maintenance. The vulnerability is tracked by the NVD and CISA. Given the ease of exploitation and lack of vendor response, organizations should prioritize mitigation efforts.

Threat Intelligence

Exploit Status

Proof of ConceptUnknown

CISA KEVNO

Internet ExposureHigh

Reports1 threat report

EPSS

1.76% (83% percentile)

CISA SSVC

Exploitationpoc

Automatableyes

Technical Impactpartial

CVSS Vector

Affected Software

Componentchatboxai/chatbox

Vendorchatboxai

Affected rangeFixed in

1.0 – 1.01.0.1

1.1 – 1.11.1.1

1.2 – 1.21.2.1

1.3 – 1.31.3.1

1.4 – 1.41.4.1

1.5 – 1.51.5.1

1.6 – 1.61.6.1

1.7 – 1.71.7.1

1.8 – 1.81.8.1

1.9 – 1.91.9.1

1.10 – 1.101.10.1

1.11 – 1.111.11.1

1.12 – 1.121.12.1

1.13 – 1.131.13.1

1.14 – 1.141.14.1

1.15 – 1.151.15.1

1.16 – 1.161.16.1

1.17 – 1.171.17.1

1.18 – 1.181.18.1

1.19 – 1.191.19.1

1.20.0 – 1.20.01.20.1

Weakness Classification (CWE)

CWE-78 CWE-77

Timeline

Reserved2026-04-12
Published2026-04-12
Modified2026-04-13
EPSS updated2026-04-20

Unpatched — 42 days since disclosure

Mitigation and Workarounds

The primary mitigation for CVE-2026-6130 is to upgrade to a patched version of chatboxai chatbox. As of this writing, no patch has been released by the vendor. Until a patch is available, implement temporary workarounds such as strict input validation on the args/env parameters within the StdioClientTransport function. Deploy a Web Application Firewall (WAF) with rules to detect and block suspicious command injection attempts. Monitor system logs for unusual command execution patterns. After implementing mitigations, verify their effectiveness by attempting to reproduce the vulnerability with a safe, controlled payload.

How to fix

Update to a patched version of chatboxai chatbox. The vendor has not responded to the vulnerability report, so it is recommended to check the official documentation or look for community forks with patches available. Review and secure the server configuration to mitigate the risk of command injection.

CVE Security Newsletter

Vulnerability analysis and critical alerts directly to your inbox.

Frequently asked questions

What is CVE-2026-6130 — Command Injection in chatboxai chatbox?

CVE-2026-6130 is a Command Injection vulnerability affecting chatboxai chatbox versions 1.0.0–1.20.0, allowing attackers to execute OS commands remotely.

Am I affected by CVE-2026-6130 in chatboxai chatbox?

You are affected if you are running chatboxai chatbox versions 1.0.0 through 1.20.0 and have not applied a patch or implemented mitigating controls.

How do I fix CVE-2026-6130 in chatboxai chatbox?

Upgrade to a patched version of chatboxai chatbox. Until a patch is available, implement input validation and WAF rules as temporary mitigations.

Is CVE-2026-6130 being actively exploited?

Yes, a public exploit is available, indicating a high probability of active exploitation.

Where can I find the official chatboxai chatbox advisory for CVE-2026-6130?

Check the chatboxai chatbox project's website and GitHub repository for updates and advisories regarding CVE-2026-6130.

NextGuard

Vulnerabilities

Is your project affected?

Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.

Scan free

Search CVEs

What do these metrics mean?

Attack Vector: Network — remotely exploitable over the internet. No physical or local access required. Widest attack surface.
Attack Complexity: Low — no special conditions required. Attacker can exploit reliably without depending on rare configurations or timing.
Privileges Required: None — unauthenticated. No login or credentials needed to exploit.
User Interaction: None — attack is automatic and silent. Victim does nothing: no click, no file open.
Scope: Unchanged — impact is limited to the vulnerable component itself.
Confidentiality: Low — partial or indirect data access. Attacker gains limited information.
Integrity: Low — attacker can modify some data with limited scope or impact.
Availability: Low — partial or intermittent denial of service. Attacker can degrade performance.