Junglewise Threat Intelligence

CVE-2026-16488: QUSETIONS MiniCode-Python OS command injection in Project File Handler

CVE-2026-16488 · Severity: medium · CVSS 5 · Published 2026-07-22

Executive brief

MiniCode-Python, an AI-powered coding assistant, is vulnerable to a security flaw that allows attackers to execute malicious code on a user's computer. By including a specially crafted configuration file in a project repository, an attacker can trick the software into running unauthorized commands when the project is opened. This could lead to the theft of sensitive information, such as API keys and credentials, or full system compromise if a user interacts with a malicious project.

Technical details

An OS command injection vulnerability exists in MiniCode-Python 0.1.0 within the Project File Handler component. The application automatically loads and executes Model Context Protocol (MCP) server configurations from a `.mcp.json` file located in the project root using `subprocess.Popen`. While an allowlist for commands exists, it includes general-purpose interpreters like `python`, which can be abused to execute arbitrary scripts bundled within a malicious repository. The attack is triggered when a user clones a malicious repository and initializes MiniCode-Python within that directory. This occurs before any trust prompts or permission managers are initialized, allowing the process to inherit the user's full environment variables, including sensitive API tokens. The issue is addressed in version 0.1.0-rc1 by requiring explicit user opt-in via the `--trust-project-mcp` flag.

Affected products

  • QUSETIONS MiniCode-Python 0.1.0

Timeline

  • 2026-06-16: disclosed: Vulnerability reported via GitHub issue and Gist disclosure
  • 2026-07-17: patched: Version 0.1.0-rc1 released with fix
  • 2026-07-22: advisory: CVE-2026-16488 published

References