critical10.0
CVE-2025-61492
terminal-controller-mcp vulnerable to Command Injection
Impact
A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to execute arbitrary commands via a crafted input.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | terminal-controller | <= 0.1.7 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gongrzhe | Terminal-Controller-Mcp | Version 0.1.7 |