orval MCP client is vulnerable to a code injection attack.

Description

The MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allows an attacker to “break out” of the string literal and inject arbitrary code.

Here is an example OpenAPI with the exploit

Recommendation

Update the @orval/mcp package to the latest compatible version. Followings are version details:

• Affected version(s): < 7.18.0
• Patched version(s): 7.18.0

References

• GHSA-mwr6-3gp8-9jmj
• CVE-2026-22785
• CWE-77
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6