CVE-2026-75130

CVE-2026-75130 is a cataloged security vulnerability in the National Vulnerability Database that organizations must track and remediate according to their AI governance policies. For enterprises deploying AI systems, unpatched CVEs represent material risks to model integrity, data security, and regulatory compliance. Effective governance frameworks require systematic monitoring of CVE disclosures, vulnerability assessments, and patch management timelines to protect AI infrastructure from exploitation.

1 item

ResearchGlobal2026-08-26

CVE-2026-75130: A CVSS 9.0 MCP Bug With No Documented Fix

Security researchers at Digital Applied have documented a critical prompt injection vulnerability, CVE-2026-75130, in Context7 through version 2.1.2, scoring 9.0 on the CVSS scale. The flaw allows unsanitized content delivered through the MCP server to redirect connected AI coding agents. No vendor fix has been documented, leaving enterprises without a standard patch path.

MCP CVE-2026-75130 Context7 prompt injection coding agents supply chain security agentic AI