TI-2026-81173 CVE-2026-117569 · GHSA-qqg8-6hv5-w2xr
OS command injection in Kali-GPT MCP scanner tool parameters
Priority HIGH 72
Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters.