sonirico

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

sonirico records in CISA KEV

No sonirico vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mcp-shell 1 record HIGH

Records

1 record in Mcp-shell · all components

TI-2025-38006 CVE-2025-61489 · GHSA-573w-fmhg-vxq2

A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1…

HIGH 68

A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00971 Published 2026-01-07 No fix listed CWE-77

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0