CVE-2026-108953 — mac-shell-mcp before 2.0.0 OS Command Injection via execute_command Arguments
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_…
Published: 2026-10-12 · CVSS: 8.5 · CVSS 4.0
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments. Attackers or malicious prompts can call a safe command such as pwd with arguments like ';' to run forbidden commands as the server user without approval.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7