RCE in Sunwood-Ai-Labs Github-Kanban-Mcp-Server
CVE-2025-53818
GitHub Kanban MCP Server is a Model Context Protocol (MCP) server for managing GitHub issues in Kanban board format and streamlining LLM task management. Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server exposes the tool `add_comment` which relies on Node.js child process API `exec` to execute the GitHub (`gh`) command, is an unsafe and vulnerable API if concatenated with untrusted user input. As of time of publication, no known patches are available.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.
Affected products
- Sunwood-ai-labs Github-kanban-mcp-server — versions = 0.3.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-53818?
- CVE-2025-53818 is a vulnerability in Sunwood-Ai-Labs Github-Kanban-Mcp-Server, classified under OS Command Injection. Published 2025-07-14.
- Is CVE-2025-53818 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.