CVE-2026-48787
gin-vue-admin vulnerable to RCE
Description
gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the code-generation feature and MCP management interface can exploit this vulnerability by injecting attacker-controlled Go source code through POST /autoCode/addFunc, and then invoking POST /autoCode/mcpStart to trigger a rebuild and restart of the standalone MCP service. This allows arbitrary operating system commands to be executed on the server with the privileges of the application process. Successful exploitation may lead to remote code execution (RCE), modification of backend source code or runtime logic, deployment of persistent backdoors, access to or manipulation of application data and configuration, and further impact on local resources running under the same service account or privilege context. The risk is highest in deployments that retain the source tree, allow writes to source files, and support local build or startup of standalone MCP components. In environments using binary-only releases, read-only filesystems, or with local build capabilities removed, the exploitability of the full attack chain is significantly reduced. However, once the online code-generation capability and MCP-hosted startup workflow are enabled, the overall security impact may reach high to critical severity. As of time of publication, it is unknown if a patched version is available. As a workaround, enforce strict allowlist validation on path- and identifier-related fields such as `humpPackageName`, `packageName`, `FuncName`, and `Router`, and only permit safe identifier formats.
INFO
Published Date :
June 19, 2026, 8:16 p.m.
Last Modified :
Oct. 25, 2026, 11:10 p.m.
Remotely Exploit :
Yes !
Source :
[email protected]
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 4.0 | HIGH | [email protected] |
Solution
- Validate all input fields for safe identifiers.
- Restrict access to code generation features.
- Update to a patched version when available.
- Review code generation and startup workflows.
Public PoC/Exploit Available at Github
CVE-2026-48787 has a 1 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-48787.
| URL | Resource |
|---|---|
| https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-22cv-9jv2-6m62 | |
| https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-22cv-9jv2-6m62 |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-48787 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-48787
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
The Project shares all information on MCP related CVE's published
mcp mcp-security mcp-cve
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-48787 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-48787 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 25, 2026
Action Type Old Value New Value Added Translation Title: gin-vue-admin de flipped-aurora, Description: gin-vue-admin es una plataforma de desarrollo básica asistida por IA. En la versión 2.9.1, un atacante autenticado con acceso a la función de generación de código y a la interfaz de gestión de MCP puede explotar esta vulnerabilidad inyectando código fuente Go controlado por el atacante a través de POST /autoCode/addFunc, y luego invocando POST /autoCode/mcpStart para activar una reconstrucción y reinicio del servicio MCP independiente. Esto permite que se ejecuten comandos arbitrarios del sistema operativo en el servidor con los privilegios del proceso de la aplicación. La explotación exitosa puede llevar a la ejecución remota de código (RCE), modificación del código fuente del backend o de la lógica de tiempo de ejecución, despliegue de puertas traseras persistentes, acceso o manipulación de datos y configuración de la aplicación, y un mayor impacto en los recursos locales que se ejecutan bajo la misma cuenta de servicio o contexto de privilegio. El riesgo es mayor en despliegues que conservan el árbol de código fuente, permiten escrituras en archivos fuente y soportan la construcción local o el inicio de componentes MCP independientes. En entornos que utilizan lanzamientos solo binarios, sistemas de archivos de solo lectura o con capacidades de construcción local eliminadas, la explotabilidad de la cadena de ataque completa se reduce significativamente. Sin embargo, una vez que la capacidad de generación de código en línea y el flujo de trabajo de inicio alojado en MCP están habilitados, el impacto general en la seguridad puede alcanzar una gravedad de alta a crítica. En el momento de la publicación, se desconoce si hay una versión parcheada disponible. Como solución alternativa, aplique una validación estricta de lista de permitidos en campos relacionados con rutas e identificadores como ’humpPackageName’, ’packageName’, ’FuncName’ y ’Router’, y solo permita formatos de identificador seguros. -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 22, 2026
Action Type Old Value New Value Added Reference https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-22cv-9jv2-6m62 Added SSVC {'id': 'CVE-2026-48787', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'poc'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2026-06-22T19:48:30.859440Z'} -
New CVE Received by [email protected]
Jun. 19, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'flipped-aurora', 'product': 'gin-vue-admin', 'versions': [{'status': 'affected', 'version': '= 2.9.1'}]}] Added Description gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the code-generation feature and MCP management interface can exploit this vulnerability by injecting attacker-controlled Go source code through POST /autoCode/addFunc, and then invoking POST /autoCode/mcpStart to trigger a rebuild and restart of the standalone MCP service. This allows arbitrary operating system commands to be executed on the server with the privileges of the application process. Successful exploitation may lead to remote code execution (RCE), modification of backend source code or runtime logic, deployment of persistent backdoors, access to or manipulation of application data and configuration, and further impact on local resources running under the same service account or privilege context. The risk is highest in deployments that retain the source tree, allow writes to source files, and support local build or startup of standalone MCP components. In environments using binary-only releases, read-only filesystems, or with local build capabilities removed, the exploitability of the full attack chain is significantly reduced. However, once the online code-generation capability and MCP-hosted startup workflow are enabled, the overall security impact may reach high to critical severity. As of time of publication, it is unknown if a patched version is available. As a workaround, enforce strict allowlist validation on path- and identifier-related fields such as `humpPackageName`, `packageName`, `FuncName`, and `Router`, and only permit safe identifier formats. Added CVSS V4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CWE CWE-78 Added Reference https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-22cv-9jv2-6m62