Threats affecting pkg:github/coding-solo/godot-mcp

CVE-2026-19044 is a command injection vulnerability in the LeeSinLiang godot-mcp project version 0.1.0. The flaw exists in the executeOperation function within src/index.ts, specifically in the create_scene/add_node component. It occurs due to unsafe manipulation of the projectPath argument, allowing an attacker with local access to execute arbitrary commands. The project maintainers have been informed but have not yet responded or issued a fix. The vulnerability has a medium severity score of 4.8 and requires local privileges to exploit.

A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this vulnerability is the function validatePath of the file build/index.js of the component run_project. The manipulation of the argument projectPath results in path traversal. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.0.0 addresses this issue. The patch is identified as eb63add552aa4bd9205395cf91b40654654a3cf2. It is suggested to upgrade the affected component.

CVE-2026-25546 is a high-severity OS command injection vulnerability in godot-mcp versions prior to 0.1.1. The vulnerability arises because user-controlled input, such as projectPath, is passed unsanitized to a shell execution function, allowing attackers to inject arbitrary shell commands. Exploitation requires local access with limited privileges and some user interaction but can lead to full compromise of the MCP server process. This affects any functionality accepting projectPath, including create_scene, add_node, and load_sprite commands. The vulnerability has been patched in version 0.1.1, and no known exploits are currently reported in the wild. European organizations using godot-mcp in development or production environments should update immediately and restrict access to the MCP server.