LibreChat MCP STDIO Argument Injection (CVE-2026-22252) - ATR-2026-00417 (3b6a0a8a-dd36-5f4b-88e0-b5d8c26e498d)
Detects exploitation of CVE-2026-22252 in LibreChat. The MCP STDIO adapter passes user-supplied tool arguments to child_process.spawn without quoting, allowing argv-level injection: an attacker supplies tool args containing shell-metacharacters or argument-separator sequences (e.g. ; curl evil, --option=$(id), \\n--exec=...) which the spawned process interprets as additional flags or shell commands. Part of the OX Security MCP-by-design batch (2026-04-15). Distinct from CVE-2026-40933 (config-time bypass) — this one targets the runtime argv channel.