Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub. Impact type from CWE-77.
Summary
Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands (npm, npx) accept argument flags that enable execution of arbitrary OS commands. Maliciously crafted MCP tasks may lead to remote code execution with the privileges of the Upsonic process. In version 0.72.0 Upsonic added a warning about using Stdio servers being able to execute commands directly on the machine.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | upsonic (PyPI) | before 0.72.0 | 0.72.0 | Patch available | GHSA-cw73-5f7h-m4gv |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- upsonic (PyPI) Vendor— Affected before 0.72.0 Fixed in 0.72.0 Patch available GHSA-cw73-5f7h-m4gv
Remediation
- Fix · GHSA-cw73-5f7h-m4gv upsonic (PyPI) Fixed in 0.72.0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-30625
- 2026-10-03 Alias added: GHSA-cw73-5f7h-m4gv
References
Other 4
- https://github.com/Upsonic/Upsonic/commit/855053fce0662227d9246268ff4a0844b481a305
- https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/
- https://github.com/Upsonic/Upsonic
- https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem
Sources
- CVE-2026-30625 · CVE Program
- CVE-2026-30625 · NVD
- FIRST EPSS
- GHSA-cw73-5f7h-m4gv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences