medium6.5
CVE-2025-61489
A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafte…
Impact
A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonirico | Mcp-Shell | Version 0.3.1 |