orval MCP client is vulnerable to a code injection attack.

Description

The MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allows an attacker to “break out” of the string literal and inject arbitrary code.

Here is an example OpenAPI with the exploit

Recommendation

Update the @orval/mcp package to the latest compatible version. Followings are version details:

• Affected version(s): < 7.18.0
• Patched version(s): 7.18.0

References

• GHSA-mwr6-3gp8-9jmj
• CVE-2026-22785
• CWE-77
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• @elgentos/magento2-dev-mcp vulnerable to command injection - CVE-2026-5603
• Orval Mock Generation Code Injection via const - CVE-2026-24132
• Orval has Code Injection via unsanitized x-enum-descriptions using JS comments - CVE-2026-25141
• @siteboon/claude-code-ui Vulnerable to Unauthenticated RCE via WebSocket Shell Injection - CVE-2026-31975

You might also like:

How do hackers hack websites?

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@orval/mcp