CVE-2026-25546
godot-mcp has Command Injection via unsanitized projectPath
Impact
### Impact A Command Injection vulnerability in godot-mcp allows remote code execution. The `executeOperation` function passed user-controlled input (e.g., `projectPath`) directly to `exec()`, which spawns a shell. An attacker could inject shell metacharacters like `$(command)` or `&calc` to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts `projectPath`, including `create_scene`, `add_node`, `load_sprite`, and others. ### Patches Fixed in version 0.1.1 by switching from `exec()` to `execFile()`, which does not invoke a shell. ### Workarounds None. Users should upgrade immediately. ### Resources - https://github.com/Coding-Solo/godot-mcp/issues/64 - https://github.com/Coding-Solo/godot-mcp/pull/67
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @coding-solo/godot-mcp | < 0.1.1 | 0.1.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coding-Solo | Godot Mcp | before 0.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/Coding-Solo/godot-mcp/commit/21c785d923cfdb471ea60323c13807d62dfecc5a
- https://github.com/Coding-Solo/godot-mcp/issues/64
- https://github.com/Coding-Solo/godot-mcp/pull/67
- https://github.com/Coding-Solo/godot-mcp/security/advisories/GHSA-8jx2-rhfh-q928
- https://github.com/advisories/GHSA-8jx2-rhfh-q928
- https://nvd.nist.gov/vuln/detail/CVE-2026-25546