Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.7%	CVE-2026-108953mac-shell-mcp · OS Command Injection High8.5EPSS 0.7%2026-10-12CVE Database V5CVE-2026-108953 mac-shell-mcp versions before 2.0.0 have an OS command injection vulnerability that allows MCP clients to bypass command whitelisting by injecting shell metacharacters into execute_command arguments. This enables execution of arbitrary commands as the server user without approval. EPSS 0.7%Vulnerability cfdude #ghsa-ffv7-8x5h-5w7r	CVE Database V5	2026-10-12

Showing 1–1 of 1 result