Skip to content
OpenAdvisories

Product · cfdude

mac-shell-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-108953

    mac-shell-mcp before 2.0.0 OS Command Injection via execute_command Arguments

    mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments. Attackers or malicious prompts can call a safe command such as …

    cfdude mac-shell-mcp