TI-2026-58772 CVE-2026-85660 · GHSA-wfpw-4v5h-6h32cli-mcp-server 0.2.5 Command Allowlist Bypass via Shell SubstitutionPriority HIGH 75cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operators function when ALLOW_SHELL_OPERATORS is enabled.CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00622 · Published 2026-09-04 · No fix listed CWE-78