RCE in Flipped-aurora Gin-vue-admin
CVE-2026-48787
gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the code-generation feature and MCP management interface can exploit this vulnerability by injecting attacker-controlled…
Vulnerability class: Command Injection (OS Command Injection)
Affected products
- Flipped-aurora Gin-vue-admin — versions = 2.9.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)