github.com/sonirico/mcp-shell vulnerabilities

CVEs whose affected-version data names the github.com/sonirico/mcp-shell package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-55582High· 8.4

4w ago

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go omits ! from containsShellMetacharacters and containsDangerousShel…

▾ Twilightsonirico · github.com/sonirico/mcp-shellEPSS 0.19%via NVD

CVE-2026-55581High· 8.4

4w ago

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowed_executables, while security.go validates only the first token and ch…

▾ Twilightsonirico · github.com/sonirico/mcp-shellEPSS 0.34%via NVD

CVE-2026-55580High

4w ago

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCP_SHELL_SEC_CONFIG_FILE is unset, main.go starts the documented bare-bi…

▾ Twilightsonirico · github.com/sonirico/mcp-shellEPSS 0.15%via NVD