OSV security advisory
Security advisory for ROOT-APP-NPM-CVE-2026-111770
ROOT-APP-NPM-CVE-2026-111770
Full advisory details, affected packages, severity context, and original source.
Affected technology
ROOT-APP-NPM-CVE-2026-111770Affected product
Advisory overview
Root has patched CVE-2026-111770 in the @modelcontextprotocol/server package for Root:npm. Multiple fixed versions available.
Affected packages and releases
Root:npm / @modelcontextprotocol/server
introduced: 0 · fixed: 2.0.0-aikido.1 · fixed: 2.0.0-aikido.2
Root:npm / @rootio/modelcontextprotocol__server
introduced: 0 · fixed: 2.0.0-root.io.1 · fixed: 2.0.0-root.io.2
