CVE-2026-75130
Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized content through the Custom AI Instructions feature served via the MCP server. Attackers can poison the custom instructions to exfiltrate credentials from environment files to an attacker-controlled service and perform destructive file deletion on the victim's machine when the agent makes a routine library documentation request.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 9
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
- EPSS probability
- 0.28%
- CWE
- CWE-1427
- Published
- 2026-08-18
- Last modified
- 2026-08-19
Affected products
- Uptash Context7
Weakness type
Related vulnerabilities
- CVE-2026-70331 — Microsoft Edge for iOS Spoofing Vulnerability
- CVE-2026-78379 — Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools
- CVE-2026-21832 — HCL AION is affected by multiple security vulnerabilities.
- CVE-2026-18733 — Prompt injection bypasses shell tool consent gate in Strands Agents Tools
- CVE-2026-15077 — Improper Neutralization of Input Used for LLM Prompting in GitLab
- CVE-2026-46580 — In Eclipse Theia versions prior to 1.71.0, files matching the pattern .prompts/*.prompttemplate in...
- CVE-2026-44688 — In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory...
- CVE-2026-44717 — MCP Calculate Server: Prompt Injection to RCE