cfdude

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

cfdude records in CISA KEV

No cfdude vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70948 CVE-2026-108953 · GHSA-ffv7-8x5h-5w7r

OS command injection in mac-shell-mcp lets clients bypass command whitelist

MEDIUM 40

mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00749 Published 2026-10-12 Fixed in 2.0.0 CWE-78

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0