TI-2026-81171 CVE-2026-117567 · GHSA-3w6w-vpcf-fv9h
OS command injection in esp-mcp via MCP tool parameters
Priority HIGH 72
esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters.