CVE-2026-119025: PowerShell Command Injection via OAuth URLs

CVE-2026-119025 is an OS command injection vulnerability in versions 7.2.0 through 10.x.x of the 'open' component on Windows and WSL. The flaw allows attackers to inject PowerShell subexpressions $(...) into URLs, typically authorization_endpoint parameters from malicious OAuth/MCP servers. When index.js processes these URLs without sanitization, it passes them directly to powershell -EncodedCommand with encoding, causing arbitrary PowerShell code execution in the application context.

Severity is CVSS 7.5 (HIGH). The attack vector requires interaction: the victim must run the application and contact a compromised OAuth endpoint supplied by the attacker. NVD data confirms the technical description on October 29, 2026. A correlated GitHub signal identifies the attack pattern (tracing untrusted OAuth URLs to shell sink) on October 30, the same day as our assessment. Public or active exploitation is not confirmed at present.

Defenders must immediately verify whether the 'open' component versions 7.2.0-10.x is present in environments with access to MCP server or OAuth configurations. Prioritize upgrade to version 11.0.0 or later, which implements proper URL escaping. Review active OAuth and MCP server configurations, verify whitelists of trusted authorization_endpoints. Enable logging and alerting for unexpected PowerShell execution on Windows/WSL, especially with -EncodedCommand parameters or encoding flags.