TI-2026-40121 CVE-2026-55582 · GHSA-74hp-mggr-hv58
mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias
Priority HIGH 72
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand.
sonirico
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
sonirico records in CISA KEVNo sonirico vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2026-40120 CVE-2026-55581 · GHSA-3x77-wg38-92r3
mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
Priority HIGH 72
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand.
TI-2026-40119 CVE-2026-55580 · GHSA-f5pj-2738-996m
mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist
Priority HIGH 72
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand.
TI-2025-38006 CVE-2025-61489 · GHSA-573w-fmhg-vxq2
A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1…
Priority HIGH 68
A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string.