Sonirico Mcp-Shell
4 CVEs affecting Sonirico Mcp-Shell. Latest disclosed: 2026-08-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-55582 | High | 8.4 | 2026-08-25 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while… |
CVE-2026-55581 | High | 8.4 | 2026-08-25 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash i… |
CVE-2025-61489 | Medium | 6.5 | 2026-01-07 | A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafte… |
CVE-2026-55580 | | 2026-08-25 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and… |